On 26 October 2026, Apple released iOS and iPadOS 26.7.2 and 27.2. For a small-business owner using work iPhones or iPads, the practical step is to check the installed OS and the update available for each device.
What was fixed
Apple’s 26.7.2 advisory lists Apple Intelligence CVE-2026-86920: an app could potentially access sensitive user data. The 27.2 advisory describes a different vulnerability, CVE-2026-86987, involving potential access by a remote attacker. Do not merge them into one issue or apply one fix’s device list to the other.
What a business can do
Identify who manages phones and tablets used for customer correspondence or work documents. Apple’s update instructions call for a backup, power and Wi-Fi before updating. In Settings → General → Software Update, check the installed version and the offered update.
Editorial advice: coordinate managed devices with the responsible administrator; afterwards record the installed version and check essential work apps. This is a proposed control procedure, not a test conducted by Nadali.
Limits of this report
Compatibility depends on the model and OS branch. An update’s supported-device list does not mean that every listed device supports Apple Intelligence. The examined advisories do not state that these two vulnerabilities are being actively exploited; that is not evidence that exploitation is absent. Updating does not guarantee complete security.
Takeaway: check work devices and install the applicable update through the normal process, rather than waiting for a new AI feature.
Author: Nadali. Prepared with AI assistance. Sources checked on 27 October 2026. Nadali has not tested the devices or updates.
Related reading: security updates for work Chrome browsers.
Illustrative photo: IPHONE 15 / Wikimedia Commons, 12 December 2023, CC BY-SA 4.0. Cropped and resized for the cover; the adapted photo is distributed under the same license. It does not depict installation of these updates or a Nadali test.
