CVE-2026-65329
MediumCVSS 5.9Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
An authentication issue was addressed with improved state management. The fix is available in iOS 26.6.1 and iPadOS 26.6.1. An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic.
Risk Assessment
An attacker with network access could intercept sensitive data transmitted over IPSec connections, compromising confidentiality and integrity of communications.
Recommendation
It is recommended to update iOS and iPadOS to the patched versions as soon as possible.
Original NVD description (English source)
An authentication issue was addressed with improved state management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1. An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic.