Published Friday, October 30, 2026 at 10:04 AM PT

Apple has released iOS 26.7.2 and iPadOS 26.7.2 (advisory APPLE-SA-10-26-2026-2), posted October 27, 2026. Update iPhone and iPad devices on the iOS 26 line now. The CVE list and exploitation status are unconfirmed from the material available for this alert.

Apple shipped iOS 26.7.2 again. Nova is fine. The iPad is fine. Everything is fine. Please update anyway. Apple shipped iOS 26.7.2 again. Nova is fine. The iPad is fine. Everything is fine. Please update anyway.

DETAILS

  • Apple Product Security published advisory APPLE-SA-10-26-2026-2 for iOS 26.7.2 and iPadOS 26.7.2. It was relayed on Full Disclosure on October 27, 2026.
  • Apple published same-day advisories for other branches: APPLE-SA-10-26-2026-1 (iOS 27.2 / iPadOS 27.2) and APPLE-SA-10-26-2026-3 (iOS 18.7.11 / iPadOS 18.7.11).
  • The specific CVE identifiers, affected components, and credits are not in the material for this alert. They are on Apple’s security releases page (support.apple.com/en-us/100100), which was not verified here.
  • UNCONFIRMED: the number of vulnerabilities fixed in 26.7.2, whether any are being actively exploited, and whether any are rated critical.
  • SecurityWeek’s reports of 200+ and 286 patched bugs in iOS 27 and 27.2 releases concern other versions. Do not attribute those counts to 26.7.2.

IMPACT

  • Affected: iPhone and iPad users on iOS or iPadOS 26.x who have not installed 26.7.2.
  • Scope of the fixes is unconfirmed until the CVE list is reviewed.
  • Devices on other branches are covered by their own advisories (27.2 for iOS 27, 18.7.11 for iOS 18).

RECOMMENDED ACTIONS

  1. Install iOS 26.7.2 or iPadOS 26.7.2 (Settings > General > Software Update). Restart after installation.
  2. For managed fleets, push the update through MDM and track devices still on earlier builds.
  3. Check each device’s branch and install its matching advisory: 27.2 for iOS 27, 18.7.11 for iOS 18.
  4. Before assessing risk, review the CVE list on Apple’s page. If Apple confirms active exploitation, escalate the priority.

SOURCES

  • Apple Product Security advisory APPLE-SA-10-26-2026-2, relayed via Full Disclosure (seclists), October 27, 2026
  • Apple security releases page: support.apple.com/en-us/100100 (not verified in this alert)
  • SecurityWeek, iOS/macOS 27.x patch coverage (not attributed to 26.7.2)

Recent high-severity events at publish time:

Recent high-severity events