There is a further risk to users beyond the two exploited vulnerabilities, now that iOS 26’s fixes are in the public domain.