Apple iOS and iPadOS Face ID Enrollment Passcode Requirement Vulnerability

A logic vulnerability has been identified in Apple iOS and iPadOS, specifically in versions prior to 26.2. This issue arises when restoring from a backup, which may delay the requirement for a passcode immediately after enrolling in Face ID. The vulnerability could potentially be exploited by taking advantage of this delay in passcode enforcement.

Impact

Failing to require a passcode immediately after Face ID enrollment could lead to unauthorized access to features or data that are protected by the passcode.

Remediation

Users can update to iOS 26.2 or iPadOS 26.2 to address this vulnerability. These updates are available through the App Store for compatible devices.