CVE-2026-113964

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.12 iPadOS versions prior to 18.7.12 iOS versions prior to 26.7.3 iPadOS versions prior to 26.7.3 iOS versions prior to 27.2.1 iPadOS versions prior to 27.2.1 macOS Golden Gate versions prior to 27.2.1 macOS Sequoia versions prior to 15.8.3 macOS Tahoe versions prior to 26.7.3 visionOS versions prior to 27.2.1 watchOS versions prior to 26.6.1 watchOS versions prior to 27.2.1

Description A logic issue involving state management allows an attacker within Bluetooth range to bypass the rate limit on pairing code attempts. This could enable an unauthorized actor to pair with a device without requiring user interaction.

Recommendations Update iOS to version 18.7.12 or later. Update iPadOS to version 18.7.12 or later. Update iOS to version 26.7.3 or later. Update iPadOS to version 26.7.3 or later. Update iOS to version 27.2.1 or later. Update iPadOS to version 27.2.1 or later. Update macOS Golden Gate to version 27.2.1 or later. Update macOS Sequoia to version 15.8.3 or later. Update macOS Tahoe to version 26.7.3 or later. Update visionOS to version 27.2.1 or later. Update watchOS to version 26.6.1 or later. Update watchOS to version 27.2.1 or later.