Apple Patches iMessage Flaws That Could Let Strangers Read Your Group Chats Without an Invite - www.techtimes.co.uk
Apple has fixed two iMessage flaws that could let unauthorised users join group chats and read messages, including some sent before they were added.
The vulnerabilities were addressed in security updates released on 9 November 2026, alongside fixes for separate Bluetooth and AirPlay pairing issues. Apple's latest security updates fix iMessage flaws that could reveal group-chat messages, alongside vulnerabilities affecting Bluetooth and AirPlay pairing.
Unauthorised Group Access
Apple's security advisory identifies the first issue as CVE-2026-113961. It describes an authorisation vulnerability that could allow a remote attacker to join an iMessage group chat and receive its messages. Apple addressed the problem through improved validation.
Message History Exposure
The second flaw, CVE-2026-113960, concerns message history. Apple says a user added to an iMessage group may be able to access messages sent before they joined. The company fixed this by removing the vulnerable code.
Bluetooth and AirPlay Fixes
The same round of updates includes fixes for separate Bluetooth-related security issues. These should not be treated as one vulnerability, as Apple's advisory describes different potential impacts.
One issue, CVE-2026-113965, could allow a malicious Bluetooth device to establish a pairing without user interaction. Another, CVE-2026-113964, could let an attacker within Bluetooth range bypass limits on pairing-code attempts.
Apple also documented CVE-2026-113968, which could allow an attacker within Bluetooth range to bypass the rate limit on AirPlay pairing-code attempts.
Update Availability
Apple's 9 November security release covers iPhone 11 models and later, alongside a range of supported iPad models. The company also publishes fixes across several operating system branches, so the relevant update depends on the device and software version.
For iPhone owners, the practical step is to check Settings, select General and then Software Update to see whether an update is available. iPad users can follow the same route. Mac owners should check System Settings for available software updates.
Related
