---
id: CVE-2026-86886
title: A path traversal issue was addressed with improved input validation
summary: >-
  A path traversal issue was addressed with improved input validation. This
  issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27.
  An app may be able to modify protected system files.
severity: medium
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N'
cwe:
  - CWE-22
vendor: apple
product: ipados
affected:
  - ipados < 26.7
  - iphone_os < 26.7
  - watchos < 27.0
patched:
  - ipados 26.7
  - iphone_os 26.7
  - watchos 27.0
published: '2026-09-14'
updated: '2026-09-18'
sourceUpdated: '2026-09-18T15:01:44.480'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-86886'
references:
  - url: 'https://support.apple.com/en-us/149034'
    label: product-security@apple.com
  - url: 'https://support.apple.com/en-us/149037'
    label: product-security@apple.com
  - url: 'https://support.apple.com/en-us/149041'
    label: product-security@apple.com
tags:
  - nvd
  - cve.org
epss: 0.00169
epssPercentile: 0.05494
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-09-17T15:38:22.958531Z'
ingestedAt: '2026-09-14T21:15:17.532Z'
---

## Overview

A path traversal issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be able to modify protected system files.

## Affected

- `ipados < 26.7`
- `iphone_os < 26.7`
- `watchos < 27.0`

## Remediation

Upgrade past the affected range:

- `ipados 26.7`
- `iphone_os 26.7`
- `watchos 27.0`