VYPR
← All advisories
High severity7.5NVD Advisory· Published Sep 14, 2026· Updated Sep 16, 2026

CVE-2026-84598

CVE-2026-84598

Description

A path traversal issue was addressed with improved path validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An attacker with physical access to a trust-paired device may be able to read and write arbitrary files.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Apple Inc./iOSllm-fuzzy
    Range: before 26.7, before 27
  • Apple Inc./Ipadosllm-fuzzy2 versions
    before 26.7, before 27+ 1 more
    • (no CPE)range: before 26.7, before 27
    • cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*range: <26.7
  • Apple Inc./Iphone OS
    cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
    Range: <26.7

Patches

Vulnerability mechanics

References

2

News mentions

1