CVE-2026-113964 is a logic flaw in Apple operating systems that allowed an attacker within Bluetooth range to bypass the rate limit on pairing code attempts and pair with a device without user interaction. The issue affects multiple Apple OS versions and has been fixed in iOS, iPadOS, macOS, visionOS, and watchOS updates. The vulnerability has a medium severity rating with a CVSS score of 5.4.