Description
This issue was addressed with improved authentication. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2. An attacker in physical proximity may be able to craft malicious network traffic to gain access to a Thread network.
Affected products
apple: ipados; apple: iphone os; apple: macos; apple: tvos
References3
- support.apple.com/en-us/149230 Vendor AdvisoryRelease Notes
- support.apple.com/en-us/149521 Vendor AdvisoryRelease Notes
- support.apple.com/en-us/149524 Vendor AdvisoryRelease Notes
Metrics
- CVSS 3.1
-
7.5
HIGH
Score source: CNA
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS — exploit probability
- 1% percentile: 56 · as of 8 November 2026
- CWE
- CWE-287
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.