CVE-2026-65329: An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic in Apple iOS and iPadOS
An authentication issue was addressed with improved state management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, iOS 27 and iPadOS 27. An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic.
AI Analysis
Technical Summary
This vulnerability involves an authentication issue in the IPSec implementation on Apple iOS and iPadOS. An attacker with privileged network access could bypass IPSec authentication mechanisms, enabling interception of network traffic. Apple resolved this by improving state management in the affected components. The flaw is fixed in iOS and iPadOS versions 26.6.1 and 27.
Potential Impact
Successful exploitation allows an attacker positioned within the network to bypass IPSec authentication, leading to interception of network traffic. This compromises confidentiality (high impact) and integrity (low impact) of communications but does not affect availability. There are no known exploits in the wild at this time.
Mitigation Recommendations
Apply the official fixes by upgrading to iOS or iPadOS version 26.6.1 or later, or version 27. These updates contain the improved state management that addresses the authentication bypass vulnerability. No additional mitigation steps are indicated.
CVE-2026-65329: An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic in Apple iOS and iPadOS
Description
An authentication issue was addressed with improved state management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, iOS 27 and iPadOS 27. An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic.
CVSS v3.1
Score 5.9medium
Affected software
Apple
iOS and iPadOS
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability involves an authentication issue in the IPSec implementation on Apple iOS and iPadOS. An attacker with privileged network access could bypass IPSec authentication mechanisms, enabling interception of network traffic. Apple resolved this by improving state management in the affected components. The flaw is fixed in iOS and iPadOS versions 26.6.1 and 27.
Potential Impact
Successful exploitation allows an attacker positioned within the network to bypass IPSec authentication, leading to interception of network traffic. This compromises confidentiality (high impact) and integrity (low impact) of communications but does not affect availability. There are no known exploits in the wild at this time.
Mitigation Recommendations
Apply the official fixes by upgrading to iOS or iPadOS version 26.6.1 or later, or version 27. These updates contain the improved state management that addresses the authentication bypass vulnerability. No additional mitigation steps are indicated.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- apple
- Date Reserved
- 2026-07-22T00:45:02.635Z
- State
- PUBLISHED
Threat ID: 6a838034bf8831d5399e5e1b
Added to database: 08/17/2026, 21:42:12 UTC
Last enriched: 09/19/2026, 00:51:51 UTC
Last updated: 10/02/2026, 14:46:09 UTC
Views: 49
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.