[FD] APPLE-SA-11-09-2026-8 watchOS 26.6.1

[Apple Product Security via Fulldisclosure <fulldisclosure@xxxxxxxxxxxx>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

APPLE-SA-11-09-2026-8 watchOS 26.6.1

watchOS 26.6.1 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/149723.

Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.

AirPlay
Available for: Apple Watch Series 6, Apple Watch Series 7, Apple Watch
Series 8, Apple Watch SE (2nd generation), and Apple Watch Ultra
Impact: An attacker in Bluetooth range may be able to bypass the rate
limit on pairing code attempts
Description: A logic issue was addressed with improved state management.
CVE-2026-113968: Apple

Bluetooth
Available for: Apple Watch Series 6, Apple Watch Series 7, Apple Watch
Series 8, Apple Watch SE (2nd generation), and Apple Watch Ultra
Impact: An attacker in Bluetooth range may be able to corrupt process
memory
Description: A use-after-free issue was addressed with improved memory
management.
CVE-2026-113970: Apple

CoreUtils
Available for: Apple Watch Series 6, Apple Watch Series 7, Apple Watch
Series 8, Apple Watch SE (2nd generation), and Apple Watch Ultra
Impact: A malicious Bluetooth device may be able to establish a pairing
without user interaction
Description: This issue was addressed with improved checks.
CVE-2026-113965: Apple

CoreUtils
Available for: Apple Watch Series 6, Apple Watch Series 7, Apple Watch
Series 8, Apple Watch SE (2nd generation), and Apple Watch Ultra
Impact: An attacker in Bluetooth range may be able to bypass the rate
limit on pairing code attempts and pair with a device without user
interaction
Description: A logic issue was addressed with improved state management.
CVE-2026-113964: an anonymous researcher

rapportd
Available for: Apple Watch Series 6, Apple Watch Series 7, Apple Watch
Series 8, Apple Watch SE (2nd generation), and Apple Watch Ultra
Impact: An attacker on the same network may be able to bypass the rate
limit on AirPlay pairing code attempts
Description: A logic issue was addressed with improved state management.
CVE-2026-113969: Apple

Instructions on how to update your Apple Watch software are
available at https://support.apple.com/kb/HT204641

To check the version on your Apple Watch, open the Apple Watch app
on your iPhone and select "My Watch > General > About".

Alternatively, on your watch, select "My Watch > General > About".

All information is also posted on the Apple Security Releases
web site: https://support.apple.com/100100.

This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/

-----BEGIN PGP SIGNATURE-----
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=FTiO
-----END PGP SIGNATURE-----

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: https://seclists.org/fulldisclosure/