Should you update to iOS 26.7?
No: install iOS 26.7.2 instead. iOS 26.7 is a security update Apple released on 14 Sep 2026 for iPhone and iPad. It fixes 95 security flaws.[1] None of them is known to be used in attacks.
It has since been replaced by iOS 26.7.1, released 28 Sep 2026, which includes all of its fixes. If you’re on an older version, install that instead.
Should you update?
No: install iOS 26.7.2 instead. iOS 26.7.2 came out on 26 Oct 2026 and includes every fix in iOS 26.7, so there’s no reason to stop at this one. Software Update offers the newest version your device can run.
Is iOS 26.7 still safe?
Not any more. The 2 updates since, up to iOS 26.7.2, fix 135 security flaws that iOS 26.7 doesn’t, and each became public the day its fix shipped. Installing it is safe: get it only from Settings → General → Software Update, never from a link in an email, text or pop-up.
What it fixes
Apple lists 95 security flaws across 57 parts of iOS. For each, Apple says what an attacker could have done before the fix.[1]
| Part | Flaws | What an attacker could do |
|---|---|---|
| Kernel | 20 | A local attacker may be able to cause unexpected system termination or corrupt kernel memory |
| SceneKit | 6 | Processing a maliciously crafted file may result in disclosure of process memory |
| ImageIO | 5 | Processing a maliciously crafted image may result in disclosure of process memory |
| CoreMedia | 4 | Processing a maliciously crafted video file may lead to unexpected app termination |
| AVEVideoEncoder | 3 | An app may be able to cause unexpected system termination |
| Bluetooth | 2 | A remote attacker may be able to cause unexpected app termination or arbitrary code execution |
| MobileBackup | 2 | An app may be able to modify protected parts of the file system |
| Model I/O | 2 | Opening a maliciously crafted file may lead to unexpected process termination |
| RealityKit | 2 | Opening a maliciously crafted file may cause unexpected process termination or disclose process memory |
| Storage | 2 | An app may be able to access user-sensitive data |
| Accelerate Framework | 1 | Processing a maliciously crafted image may lead to unexpected process termination |
| Accessibility | 1 | An app may be able to access sensitive user data |
| APFS | 1 | An app may be able to cause unexpected system termination or write kernel memory |
| Apple Neural Engine | 1 | An app may be able to cause unexpected system termination |
| AppleAVD | 1 | An app may be able to cause unexpected system termination |
| 42 other parts | 42 |
How to update, and how long it takes
It takes 15 to 45 minutes in all: a few minutes to download, then it prepares, installs and restarts, and you can’t use the iPhone or iPad while it installs.
- Back up first if you can.iCloud backup or your computer. Updates rarely go wrong, but a backup makes it painless if one does.
- Open Settings → General → Software Update.Your iPhone or iPad shows the newest version it can run. Tap or click Update Now, or Upgrade Now for a new major version.
- Leave it plugged in.It downloads, prepares and restarts. Expect 15 to 45 minutes.
- Turn on automatic updates.In the same place, under Automatic Updates, turn on both downloading and installing security responses and updates.
To check it worked: Settings → General → About shows the iOS version. It should say 26.7.1 or later.
Older devices
The same day, Apple released iOS 27 (163 security flaws) for devices that stay on an older version. Each fixes the same holes where they apply.
26.6.1 vs 26.7
iOS 26.6.1, released 17 Aug 2026, fixed 35 security flaws. iOS 26.7 fixes 95 security flaws and includes the fixes before it, so going straight to 26.7 gets you both.
- Before: iOS 26.6.1, 17 Aug 2026, 35 security flaws
- After: iOS 26.7.1, 28 Sep 2026, 1 security flaw
- iOS updates, every release and the latest version
- Updates, the latest version of everything HARD tracks
References
- ^ Apple. “About the security content of iOS 26.7”, 14 Sep 2026.