CVE-2026-86977 is an authorization vulnerability in iOS and iPadOS that was addressed by improving network restrictions. The flaw could allow an app to initiate calls or send messages without proper authorization. This issue is fixed in iOS 27 and iPadOS 27.