A logic issue was addressed with improved validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27, watchOS 27. An app may be able to bypass network restrictions.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Apple
  • Ios And Ipados
  • Ipados
  • Iphone Os
  • Macos
  • Visionos
  • Watchos

Configuration 1 [-]

OR cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

No data.

References
Link Providers
https://support.apple.com/en-us/149034 cve-icon cve-icon
https://support.apple.com/en-us/149035 cve-icon cve-icon
https://support.apple.com/en-us/149037 cve-icon cve-icon
https://support.apple.com/en-us/149038 cve-icon cve-icon
History

Sun, 20 Sep 2026 20:00:00 +0000

Type Values Removed Values Added
Title Logic Flaw Enables Network Restriction Bypass on Apple Devices

Thu, 17 Sep 2026 17:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 16 Sep 2026 14:30:00 +0000

Type Values Removed Values Added
First Time appeared Apple ipados
Apple iphone Os
Weaknesses CWE-862
CPEs cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
Vendors & Products Apple ipados
Apple iphone Os
Metrics cvssV3_1

{'score': 4.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N'}

Wed, 16 Sep 2026 11:45:00 +0000

Type Values Removed Values Added
Title Bypass of Network Restrictions via Logic Flaw in Apple OS
Weaknesses CWE-285

Tue, 15 Sep 2026 11:15:00 +0000

Type Values Removed Values Added
Title Bypass of Network Restrictions via Logic Flaw in Apple OS
Weaknesses CWE-285

Tue, 15 Sep 2026 02:30:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple ios And Ipados
Apple macos
Apple visionos
Apple watchos
Vendors & Products Apple
Apple ios And Ipados
Apple macos
Apple visionos
Apple watchos

Mon, 14 Sep 2026 21:00:00 +0000

Type Values Removed Values Added
Description A logic issue was addressed with improved validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27, watchOS 27. An app may be able to bypass network restrictions.
References
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published: 2026-09-14T20:49:22.412Z

Updated: 2026-10-20T00:50:33.291Z

Reserved: 2026-09-01T21:13:17.752Z

Link: CVE-2026-84551

cve-icon Vulnrichment

Updated: 2026-09-17T16:11:52.263Z

cve-icon NVD

Status : Modified

Published: 2026-09-14T21:17:31.240

Modified: 2026-09-17T17:16:49.490

Link: CVE-2026-84551

cve-icon Redhat

No data.