Decrypt reported that Calif.io demonstrated an untethered jailbreak on an iPhone 18 Pro running iOS 27.0.1 at Hexacon in Paris on October 16, 2026. After the phone restarted and was unlocked with its normal passcode, it reportedly returned to an SSH session as root. Decrypt described the sequence; Calif.io’s October 16 post separately says the company presented demonstrations at Hexacon, which held its 2026 conference in Paris on October 16–17.
Decrypt said the terminal showed iOS 27.0.1 and about two minutes of uptime after the reboot. A stage video posted by jailbreak researcher Billy Ellis was cited in Decrypt’s account.
What “untethered” means
An untethered jailbreak returns after a restart without a computer attached, according to Decrypt’s explanation. The term describes the reported post-reboot behavior; the demonstration’s named configuration was an iPhone 18 Pro running iOS 27.0.1.
Apple’s two Calif.io-linked security findings
Apple’s iOS 27 security advisory, dated September 14, 2026, lists two findings associated with Calif.io. CVE-2026-65410 affects AVEVideoEncoder and could let an app cause unexpected system termination. Apple credits Calif.io in collaboration with Claude and Anthropic Research for that finding.
CVE-2026-65409 affects Foundation and could let an app cause a denial of service. Apple credits Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research. The advisory does not connect either finding to the Hexacon jailbreak.
What was reported about a public tool
Calif.io said its demonstrations would be released “in due time” but gave no date. Decrypt reported that no public jailbreak tool had been released as of October 16, 2026.
