Medium severity5.5NVD Advisory· Published Sep 14, 2026· Updated Sep 16, 2026
CVE-2026-65411
CVE-2026-65411
Description
A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, visionOS 27. An app may be able to modify protected parts of the file system.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*range: <26.7
- (no CPE)range: iPadOS 26.7, iPadOS 27
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*range: <27.0
- (no CPE)range: visionOS 27
- Range: iOS 26.7, iOS 27
Patches
Vulnerability mechanics
References
3- support.apple.com/en-us/149034nvdVendor Advisory
- support.apple.com/en-us/149038nvdVendor Advisory
- support.apple.com/en-us/149041nvdVendor Advisory
News mentions
1- Apple Updates Everything, (Mon, Sep 14th)SANS Internet Storm Center · Sep 14, 2026