CVE-2026-20642

Low · 2.4

CVSS

2.4

EPSS

0.2%

Published

Feb 11, 2026

CISA due date

—

The record

An input validation issue was addressed. This issue is fixed in iOS 26.3 and iPadOS 26.3. A person with physical access to an iOS device may be able to access photos from the lock screen.

Affected packages

Ecosystem	Package	Introduced	Fixed