Apple released iOS 26.2 last week with important security fixes. At the same time, it also shipped iOS 18.7.3 for users who haven’t upgraded yet — at least in theory.
In practice, Jason Snell at Six Colors reports that some iPhone owners aren’t being offered the iOS 18 security update at all, and are instead being pushed straight to iOS 26.
Apple released iOS 26.2 last Friday with a number of key security fixes, including two WebKit bugs that may have been exploited in attacks against “specific targeted individuals on versions of iOS before iOS 26.”
iOS 18.7.3 was also released, fixing those same two WebKit bugs and a variety of other security vulnerabilities for users not on iOS 26.
The problem, as Snell explains, affects users who have opted to remain on iOS 18 even though they have iPhones capable of running iOS 26. Those users aren’t being presented with iOS 18.7.3 as an update option. Instead, the only update being shown to them in the Settings app is iOS 26.2.
This is essentially Apple saying that users must update to iOS 26 to have protection from the latest security vulnerabilities, even though iOS 18.7.3 exists.
If someone is still running iOS 18 right now, it’s clearly a conscious decision they’ve made. Whether it’s because of personal preference, app compatibility, or something else, that person has clearly decided that they aren’t ready to update to iOS 26. As Snell rightfully points out, those people shouldn’t have to choose between “ignoring a security update and updating to an OS version they’re not ready for.”
There are a lot of reasons to avoid updating to iOS 26, from a dislike of Liquid Glass to software compatibility to a general wariness to install major updates for a while. This move effectively forces users to take the iOS 26 upgrade if they want the security updates. (iPhones not capable of running iOS 26 are offered the 18.7.3 update. iPads seem to be unaffected.)
If you’re one of the people in the camp of not updating to iOS 26 yet, there’s a workaround:
Several users have reported to me that a workaround is to sign up for Apple’s public beta program and opt in to the iOS 18 public beta track, at which point you’ll be offered 18.7.3. Seems like a long way to go just to get security fixes.
... continue reading