VYPR
← All advisories
Medium severity4.6NVD Advisory· Published Sep 14, 2026· Updated Sep 18, 2026

CVE-2026-43674

CVE-2026-43674

Description

An authentication issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27. An attacker with physical access to an unlocked device may be able to view Wi-Fi passwords without authentication.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Apple Inc./Ipados2 versions
    cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*range: <27.0
    • (no CPE)range: = 27
  • Apple Inc./Iphone OS
    cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
    Range: <27.0
  • Apple Inc./iOSllm-fuzzy
    Range: = 27

Patches

Vulnerability mechanics

References

1

News mentions

1