CVE-2026-43796 is a vulnerability in Apple iOS and iPadOS where an app may be able to access sensitive user data due to insufficient data protection. Apple fixed this issue by improving data protection mechanisms in iOS 26.6 and iPadOS 26.6, as well as in related Apple operating systems. The vulnerability has a medium severity rating and a CVSS 3.1 base score of 5.5, indicating a local attack vector with low complexity and no privileges required but requiring user interaction. The vulnerability impacts confidentiality but not integrity or availability.

An attacker who successfully exploits this vulnerability could gain unauthorized access to sensitive user data on affected Apple devices. The impact is limited to confidentiality loss without affecting data integrity or availability. No known exploits are currently reported in the wild.

This vulnerability is fixed in iOS 26.6 and iPadOS 26.6. Users and administrators should update affected devices to these versions or later to remediate the issue. Since this is not a cloud service, patching the device OS is required. Patch status is confirmed by the vendor advisory indicating the fix is included in these versions.