CVE-2025-68640

The Apple Find My backend service through 2025-12-17 allows an attacker in possession of a valid PET Private Endpoint Token to enumerate devices and remove offline devices from an Apple ID account without triggering two-factor authentication or ownership verification. This may result in...

PT-2026-61979

Name of the Vulnerable Software and Affected Versions Apple Find My backend service versions prior to 2025-12-18 Description The backend service allows an attacker with a valid Private Endpoint Token PET to enumerate devices and remove offline devices from an Apple ID account. This process bypass...

CVE-2025-68640

The Apple Find My backend service through 2025-12-17 allows an attacker in possession of a valid PET Private Endpoint Token to enumerate devices and remove offline devices from an Apple ID account without triggering two-factor authentication or ownership verification. This may result in...

CVE-2025-68640

The Apple Find My backend service through 2025-12-17 allows an attacker in possession of a valid PET Private Endpoint Token to enumerate devices and remove offline devices from an Apple ID account without triggering two-factor authentication or ownership verification. This may result in...

CVE-2025-68640

The Apple Find My backend service is vulnerable to an authentication flaw through December 17, 2025. An attacker who obtains a valid PET (Private Endpoint Token) can enumerate devices and remove offline devices from an Apple ID account. This action bypasses two-factor authentication and ownership...