Overview
What is CVE-2026-86977?
An authorization issue was addressed with improved network restrictions. This issue is fixed in iOS 27 and iPadOS 27.
An app may be able to initiate calls or send messages.
Source: NVD
Vulnerability intelligence
CVE-2026-86977 and is rated High severity with a CVSS score of 7.5. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.
An authorization issue was addressed with improved network restrictions. This issue is fixed in iOS 27 and iPadOS 27.
An app may be able to initiate calls or send messages.
Source: NVD