If Your iPhone Still Runs iOS 26, Install iOS 26.7.1 Immediately to Fix Zero-Day Flaw

If your iPhone isn’t running iOS 27, you need to download iOS 26.7.1 now to patch a zero‑day flaw. Apple wrote online that this update patches a security issue on devices running iOS versions prior to iOS 27 that might have been actively exploited in an “extremely sophisticated attack.”

Zero‑day exploits are newly discovered vulnerabilities with no existing protections. Updating to software versions that patch those vulnerabilities is generally the only way to guard your devices.

You can download iOS 26.7.1 now by going to Settings > General > Software Update > Update Now and following the prompts on your screen.

What the patch fixes

According to Apple’s release notes, iOS 26.7.1 patches a security issue in CoreGraphics, a framework that handles low‑level, lightweight 2D renderings. Apple wrote that this issue could lead to arbitrary code execution, which could allow a third party to steal your data or hack your device for other nefarious purposes.

“Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals,” the company wrote online.

Apple’s description suggests this flaw was used in a targeted attack as opposed to a widespread campaign, so most people probably aren’t the intended target of this attack. However, you should still download iOS 26.7.1 to remove the possibility entirely.

If you’re on iOS 27

If you’re running iOS 27, you should already be protected from this issue since Apple wrote online the flaw affected iOS versions prior to iOS 27. If you are on iOS 27, I still recommend downloading iOS 27.0.1 now to give yourself the most up‑to‑date software.

More on iOS

For more on iOS, here’s what to know about iOS 27, why you might not see iOS 27.1 on your device and what iOS 27.2 could bring to your device.