A logic issue was addressed with improved state management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker on the same network may be able to bypass the rate limit on AirPlay pairing code attempts.

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Apple
  • Ios And Ipados
  • Macos
  • Visionos
  • Watchos

No data.

No data.

References
Link Providers
https://support.apple.com/en-us/149715 cve-icon cve-icon
https://support.apple.com/en-us/149716 cve-icon cve-icon
https://support.apple.com/en-us/149717 cve-icon cve-icon
https://support.apple.com/en-us/149718 cve-icon cve-icon
https://support.apple.com/en-us/149719 cve-icon cve-icon
https://support.apple.com/en-us/149720 cve-icon cve-icon
https://support.apple.com/en-us/149722 cve-icon cve-icon
https://support.apple.com/en-us/149723 cve-icon cve-icon
https://support.apple.com/en-us/149724 cve-icon cve-icon
https://support.apple.com/en-us/149851 cve-icon cve-icon
History

Thu, 12 Nov 2026 22:00:00 +0000

Type Values Removed Values Added
Description A logic issue was addressed with improved state management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker on the same network may be able to bypass the rate limit on AirPlay pairing code attempts. A logic issue was addressed with improved state management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker on the same network may be able to bypass the rate limit on AirPlay pairing code attempts.
References

Thu, 12 Nov 2026 18:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-693
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N'}

Mon, 09 Nov 2026 22:15:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple ios And Ipados
Apple macos
Apple visionos
Apple watchos
Vendors & Products Apple
Apple ios And Ipados
Apple macos
Apple visionos
Apple watchos

Mon, 09 Nov 2026 21:30:00 +0000

Type Values Removed Values Added
Title AirPlay Pairing Code Rate Limit Bypass via Logic Error
Weaknesses CWE-285

Mon, 09 Nov 2026 20:30:00 +0000

Type Values Removed Values Added
Description A logic issue was addressed with improved state management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker on the same network may be able to bypass the rate limit on AirPlay pairing code attempts.
References
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published: 2026-11-09T20:28:00.897Z

Updated: 2026-11-12T21:46:06.315Z

Reserved: 2026-10-20T21:06:55.481Z

Link: CVE-2026-113969

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-11-09T22:18:26.800

Modified: 2026-11-12T22:18:22.460

Link: CVE-2026-113969

cve-icon Redhat

No data.