Should you update to tvOS 26.6?
Yes, this week. tvOS 26.6 is a security update Apple released on 27 Jul 2026 for Apple TV. It fixes 106 security flaws.[1] None of them is known to be used in attacks.
It is the newest tvOS 26 release, so it’s the one to have.
Should you update?
Yes, this week. It fixes 106 security flaws, and attackers study each release to work out what it fixed. Every security update closes holes that become public the moment it ships, so the risk of staying on the old version only grows. Waiting a week to see if others hit problems is a common habit; with a security update it’s the wrong trade.
Is tvOS 26.6 safe to install?
Yes. It’s Apple’s own security release, and updates rarely go wrong; a backup makes it painless if one does. The one unsafe way to get it is from a link: Apple never sends updates by email, text or pop-up, so install it only from Settings → System → Software Updates on the Apple TV.
What it fixes
Apple lists 106 security flaws across 36 parts of tvOS. For each, Apple says what an attacker could have done before the fix.[1]
| Part | Flaws | What an attacker could do |
|---|---|---|
| Kernel | 25 | An app may be able to cause unexpected system termination or corrupt kernel memory |
| WebKit | 25 | Processing maliciously crafted web content may result in the disclosure of process memory |
| Model I/O | 7 | Processing a maliciously crafted image may corrupt process memory |
| ImageIO | 5 | Processing a maliciously crafted texture may lead to unexpected app termination |
| SceneKit | 4 | Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution |
| WebRTC | 4 | Processing maliciously crafted web content may lead to an unexpected process crash |
| CoreAudio | 3 | Processing a maliciously crafted audio file may corrupt process memory |
| curl | 2 | Authentication credentials may be sent to a server on another origin |
| Game Center | 2 | A malicious app may be able to break out of its sandbox |
| libxslt | 2 | Processing maliciously crafted web content may lead to an unexpected process crash |
| WebKit Canvas | 2 | Processing maliciously crafted web content may lead to an unexpected Safari crash |
| Accounts Framework | 1 | An app may be able to fingerprint the user |
| App Store | 1 | An app may be able to access sensitive user data |
| Apple Neural Engine | 1 | An app may be able to cause unexpected system termination |
| AppleAVD | 1 | An app may be able to cause unexpected system termination |
| 21 other parts | 21 |
How to update, and how long it takes
Usually under half an hour. The Apple TV restarts on its own when it’s done.
- Open Settings on the Apple TV.System → Software Updates → Update Software.
- Turn on automatic updates.In the same place, turn on Automatically Update.
To check it worked: Settings → General → About shows the tvOS version. It should say 26.6 or later.
Before and after
- After: none yet. This is the newest.
- tvOS updates, every release and the latest version
- Updates, the latest version of everything HARD tracks
References
- ^ Apple. “About the security content of tvOS 26.6”, 27 Jul 2026.