PT-2026-1803 · Apple · Ios+1

Published 2026-01-09 · Updated 2026-01-10 · CVE-2025-46286

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.2 iPadOS versions prior to 26.2

Description A logic issue exists related to validation. Restoring from a backup may prevent a passcode from being required immediately after Face ID enrollment.

Recommendations Update to iOS version 26.2. Update to iPadOS version 26.2.

Fix

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

Related Identifiers

CVE-2025-46286

Affected Products

Ios

Ipados

References · 6

• https://support.apple.com/en-us/125884 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-46286 · Security Note
• https://osv.dev/vulnerability/CVE-2025-46286 · Vendor Advisory
• https://twitter.com/CVEnew/status/2009741110604685605 · Twitter Post
• https://t.me/CVEtracker/41879 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2009846239165132997 · Twitter Post