Apple has just released two iPhone updates. One of them is the first update to iOS 27, iOS 27.0.1, for all iPhones from the iPhone 11 onwards, including the new iPhone 18 Pro and iPhone 18 Pro Max (full details here ). But there’s also one for those reluctant to update to the new cycle just yet: iOS 26.7.1. Here are the details.

Which iPhones Can Run iOS 26.7.1?

Since all iPhones that supported iOS 26 can run iOS 27 as well, the list of phones is largely the same: all iPhones from the iPhone 11 series onwards, that is anything from 2019 and more recent. This includes the more affordable models, the iPhone SE second- and third-generation models and the iPhone 16e and iPhone 17e.

In fact, the only phones that you can’t install iOS 26.7.1 on are the newly released iPhone 18 Pro and iPhone 18 Pro Max. That’s because they came pre-loaded with iOS 27 and you can’t downgrade to iOS 26.

How To Download And Install iOS 26.7.1

As with other iOS 26 releases, your first port of call is the iPhone’s Settings app. Here, tap on General, followed by Software Update to find Download and Install. This is a medium-sized update, around 2GB on my iPhone 17 Pro — though this hadn’t been updated since iOS 26.4. If you are updating from iOS 26.7, your update will be smaller.

Apple iOS 26.7.1 — What’s In The Release

Apple’s notes are sparse for this release, merely saying “This update provides security fixes for your iPhone,” which is the bare minimum, really.

Apple’s support page detailing the security content of iOS 26.7.1 reveals that there is a single security fix here — and the notes confirm there are no new features. That’s to be expected. Features will only be released for iOS 27 from now on.

The security issue relates to CoreGraphics, the two-dimensional drawing framework used for high-fidelity graphics. Apple says that processing a maliciously crafted file “may lead to arbitrary code execution,” and the company says it’s aware that this issue could have been exploited already.

That’s worrying, but Apple says it’s likely to have been part of a sophisticated attack “against specific targeted individuals,” and that the flaw has been addressed in this release.