This vulnerability involves an inconsistent user interface issue in Apple iOS and iPadOS that could allow a remote attacker to bypass network filters. The root cause relates to state management inconsistencies that were corrected by Apple. The issue affects multiple Apple operating systems and was fixed in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. The CVSS v3.1 base score is 6.5, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact.

A remote attacker may bypass network filters, potentially allowing unauthorized network traffic to pass through controls intended to restrict it. This impacts the integrity of network filtering mechanisms but does not affect confidentiality or availability. There are no known exploits in the wild currently.

Apple has fixed this vulnerability in iOS 26.6, iPadOS 26.6, and other related OS versions. Users and administrators should apply these official updates to remediate the issue. Patch status is confirmed by the vendor advisory stating the issue is fixed in these versions.