Skip to content
NewA calmer, faster ZeroHour
Vulnerability

CVE-2026-113969

Same-network AirPlay pairing rate-limit bypass on Apple devices

CVSS
—
EPSS
—
Published
·
Modified
Analyze CVE-2026-113969 with Vani AIImpact, affected versions, exploitation status, mitigations and detection
AI analysisSummaries by Vani AI

A logic flaw in AirPlay state handling lets an attacker on the same network bypass the rate limit on pairing-code attempts. No account or user interaction is described. Success weakens the pairing-code throttle, which can aid guessing of AirPlay pairing codes. Affected Apple OS releases are those fixed in the listed updates; earlier builds are not enumerated.

What to do: Install Apple’s updates that include iOS/iPadOS 18.7.12, 26.7.3, or 27.2.1, macOS Sequoia 15.8.3, Tahoe 26.7.3, Golden Gate 27.2.1, visionOS 27.2.1, and watchOS 26.6.1 or 27.2.1.

ProductAffectedFixed in
Apple iOS—18.7.12, 26.7.3, 27.2.1
Apple iPadOS—18.7.12, 26.7.3, 27.2.1
Apple macOS Golden Gate—27.2.1
Apple macOS Sequoia—15.8.3
Apple macOS Tahoe—26.7.3
Apple visionOS—27.2.1
Apple watchOS—26.6.1, 27.2.1
Estimated exposure
No basis for an estimate.

Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.

Description · NVD

A logic issue was addressed with improved state management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker on the same network may be able to bypass the rate limit on AirPlay pairing code attempts.

NVD CVE.org GitHub PoCs EPSS (—)

In the news

4 stories