Search: CVE-2026-113969

CVE-2026-113969 is a logic flaw in Apple AirPlay that allows an attacker on the same network to bypass the rate limiting on pairing code attempts. This vulnerability was addressed by improved state management and fixed in multiple Apple OS versions including iOS 18.7.12, iPadOS 18.7.12, iOS 26.7.3, iPadOS 26.7.3, iOS 27.2.1, iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 26.6.1, and watchOS 27.2.1. The flaw could allow an attacker to attempt AirPlay pairing codes without the normal rate limiting controls.