Vulnerability record/PUBLISHED/Published Nov 9, 2026 20:27:59 UTC

CVE-2026-113963

An authorization issue was addressed with improved state management. This issue is fixed in HomeView Software Version 27.2, iOS 27.2.1 and iPadOS 27.2.1, tvOS 27.2.1, visionOS 27.2.1, watchOS 27.2.1. An app may be able to access sensitive user data.

Base score5.5/ 10

SeverityMediumCVSS 3.1

Exploitability / impact

CVSS metric breakdown

Vector-derived attributes

Base severityMedium

Attack vectorLocalAV

Attack complexityLowAC

Privileges requiredLowPR

User interactionNoneUI

ScopeUnchangedS

Confidentiality impactHighC

Integrity impactNoneI

Availability impactNoneA

CVSS vector stringCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.

Record context

CVE Numbering Authorityapple

Last updatedNov 13, 2026 20:33:38 UTC

PublishedNov 9, 2026 20:27:59 UTC

ReservedOct 20, 2026 21:06:55 UTC