{"id":"CVE-2026-43813","published":"2026-07-27T20:14:56Z","modified":"2026-07-28T14:25:47Z","title":"A validation issue was addressed with improved input sanitization","vendor":"Apple","product":"iOS and iPadOS","tier":"tail","description":{"text":"A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. A maliciously crafted app may be able to bypass code signing enforcement.","provenance":"source","from":"CVE.org"},"cvss":{"score":7.1,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","provenance":"source","from":"CISA ADP Vulnrichment"},"epss":{"score":0.00167,"percentile":0.05963,"provenance":"source"},"cwes":[{"id":"CWE-20","name":"Improper Input Validation"}],"references":[{"url":"https://support.apple.com/en-us/128066","tags":[]},{"url":"https://support.apple.com/en-us/128067","tags":[]},{"url":"https://support.apple.com/en-us/128068","tags":[]},{"url":"https://support.apple.com/en-us/128069","tags":[]},{"url":"https://support.apple.com/en-us/128070","tags":[]}],"priority":{"score":11.2,"factors":[{"name":"EPSS percentile","points":1.19},{"name":"Public exploit code","points":5.0},{"name":"CVSS severity","points":4.97}]},"exploitSources":{"pocGithub":{"count":1,"skipped":0,"earliest":"2026-07-29","earliestUrl":"https://github.com/EastArctica/CVE-2026-43813","repos":[{"name":"EastArctica/CVE-2026-43813","url":"https://github.com/EastArctica/CVE-2026-43813","stars":9,"created":"2026-07-29"}]},"first":{"date":"2026-07-29","source":"PoC-in-GitHub","url":"https://github.com/EastArctica/CVE-2026-43813"},"provenance":"source"},"vendorSlug":"apple","affectedVersions":[{"vendor":"Apple","product":"iOS and iPadOS","versions":["< 26.6"]},{"vendor":"Apple","product":"macOS","versions":["< 26.6"]},{"vendor":"Apple","product":"tvOS","versions":["< 26.6"]},{"vendor":"Apple","product":"visionOS","versions":["< 26.6"]},{"vendor":"Apple","product":"watchOS","versions":["< 26.6"]}],"euvd":{"id":"EUVD-2026-49457","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-class-apple-ios-macos-cwe-20"}}