Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3. An attacker with physical access to a locked device may be able to view sensitive user information.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-11 | 1 | General1 |
| 2026-02-12 | 2 | Disclosure1Patch1 |
CVE-2026-20661 An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3, iOS 18.7.5 and iPadOS 18.7.5. An attacker with p… https://www.cve.org/CVERecord?id=CVE-2026-20661
Post summary
The message announces a vendor fix for CVE‑2026‑20661, noting an authorization flaw corrected through state‑management updates in specific iOS/iPadOS releases.
Apple paid me $1,000 for CVE-2026-20661. Thanks for the bounty! #bugbounty #securityresearch #infosec #hacker #CVE #apple #ios #togetherwehitharder #applebounty https://t.co/omQhukyCRS
Post summary
The tweet announces that Apple paid a bounty for CVE-2026-20661, but it contains no technical details, exploit code, or evidence of active exploitation.
CVE-2026-20661 Authorization Bypass in iOS and iPadOS Enables Sensitive Information Disclosure https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-20661
Post summary
The text announces CVE-2026-20661, describing an authorization bypass that could expose sensitive data on iOS and iPadOS, but provides no proof of exploitation or mitigations.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | apple | ipados | - | - | - |
| OS | apple | iphone_os | - | - | - |