CVE-2025-46286

Medium · 4.3

CVSS

4.3

EPSS

0.2%

Published

Jan 9, 2026

CISA due date

—

The record

A logic issue was addressed with improved validation. This issue is fixed in iOS 26.2 and iPadOS 26.2. Restoring from a backup may prevent passcode from being required immediately after Face ID enrollment.

Affected packages

Ecosystem	Package	Introduced	Fixed