CVE-2019-8804: Apple iPadOS

Medium severity, CVSS 5.7. EPSS: 0.4% chance of exploitation in the next 30 days.

An inconsistency in Wi-Fi network configuration settings was addressed. This issue is fixed in iOS 13.2 and iPadOS 13.2. An attacker in physical proximity may be able to force a user onto a malicious Wi-Fi network during device setup.

Affected products

• Apple iPadOS: up to and including 13.2
• Apple iPhone OS: before 13.2 (fixed in 13.2)

Published 2019-12-18. Last modified 2026-06-17.