Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3. An attacker with physical access to a locked device may be able to view sensitive user information.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-20655 Authorization Bypass in iOS and iPadOS Enables Sensitive Information Disclosure https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-20655
Post summary
A new iOS/iPadOS vulnerability (CVE-2026-20655) has been disclosed, involving an authorization bypass that allows sensitive information to be disclosed.
CVE-2026-20655 An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3, iOS 18.7.5 and iPadOS 18.7.5. An attacker with p… https://www.cve.org/CVERecord?id=CVE-2026-20655
Post summary
CVE-2026-20655 is an authorization issue fixed by specific iOS/iPadOS releases, with no known PoC, exploit code, or active exploitation.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | apple | ipados | - | - | - |
| OS | apple | iphone_os | - | - | - |