{"affected":[{"product":"iOS and iPadOS","source":"CNA: apple","vendor":"Apple","versions":[{"lessThan":"18.7.12","status":"affected","version":"0","versionType":"custom"},{"lessThan":"26.5","status":"affected","version":"0","versionType":"custom"}]}],"cveId":"CVE-2026-113971","cwes":["CWE-284"],"description":"This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.5 and iPadOS 26.5. An attacker with physical access may be able to pair a device with an AirPlay receiver from the lock screen.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":3.5,"severity":"low","source":"ADP: CISA-ADP","vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","version":"3.1"}],"modifiedAt":1794259030804,"publishedAt":1794256081315,"references":[{"source":"CNA: apple","tags":[],"url":"https://support.apple.com/en-us/127110"},{"source":"CNA: apple","tags":[],"url":"https://support.apple.com/en-us/149717"}],"remediation":[],"revision":"989be5d8a492e13575975c0d04af575e3ab0d82053a18d9f11c90b25156935d4","sources":[{"modifiedAt":1794259030804,"name":"CNA: apple","retrievedAt":1794262129143,"url":"https://www.cve.org/CVERecord?id=CVE-2026-113971"}],"ssvc":{"assessedAt":1794259015512,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"CVE-2026-113971","updatedAt":1794262129143}