Apple released iOS 26.6.1 on August 17, delivering more than 20 bug fixes and security patches before the expected release of iOS 27 next month. One of the most notable fixes addresses a vulnerability in iCloud Private Relay that could expose a user's IP address even when the feature was active.
According to a report by CNET, users can download the update by going to Settings, tapping General, selecting Software Update, and then tapping Update Now.
The update's common vulnerabilities and exposures report shows that iOS 26.6.1 addresses various issues that could cause unexpected system crashes. Apple's release notes say that many of the fixes in the update target problems in WebKit, the engine that powers Safari and other third-party web browsers on iOS. The update also patches issues in the iOS kernel, which handles core functions including security and memory management.
Security updates help ensure a device has the best protection possible and runs smoothly. The recommendation from CNET is to download the update now rather than waiting for iOS 27, which is expected to arrive around mid-September based on past Apple release patterns.
The iCloud Private Relay vulnerability is the kind of flaw that matters most to users who rely on the feature for privacy. Private Relay is designed to hide a user's IP address from websites and network providers, routing traffic through two separate internet relays. A vulnerability that bypasses that protection defeats its core purpose, making the patch one of the more urgent reasons to update.
iOS 27 is expected to arrive in the coming weeks, but the security gaps addressed in iOS 26.6.1 would remain open on any device that skips this intermediate update and waits for the next major release.
