CVE-2026-113971 is a vulnerability in iOS and iPadOS that allowed an attacker with physical access to pair a device with an AirPlay receiver from the lock screen. This issue was addressed by restricting the options available on a locked device. The vulnerability is fixed in iOS 18.7.12, iPadOS 18.7.12, iOS 26.5, and iPadOS 26.5.