Cellebrite reportedly holds an unpatchable iPhone exploit while its stock sits 45 percent off its high

Cellebrite▼−3.08% — Cellebrite, down 3.08 percent today reportedly unveiled LOKI at the Hexacon security conference↗ this week: a boot ROM exploit covering Apple▲+0.16% — Apple, up 0.16 percent today chips from the iPod touch 2 to the iPhone 11 ¹². Boot ROM code is burned into the chip at manufacture, so no software update can ever close it ². The slide calls it a timing race that early proofs of concept won roughly once in 25 tries, and it needs the phone physically in hand, in DFU mode, the device's deepest recovery state ¹².

Cellebrite, the Israeli forensics vendor whose extraction kits sit inside police forces, intelligence agencies and corporate investigators, has confirmed none of it; the account rests on one specialist blog and one X post↗ ¹². The market verdict is scheduled anyway: third-quarter results land on November 11, 2026, against a $145.89 million revenue consensus ³.

The hole is permanent; the covered fleet only shrinks

Unpatchable means every affected device stays open forever, and it means the covered base only shrinks: LOKI stops at the iPhone 11, and the DFU requirement rules out anything remote or industrial-scale ¹². The capability runs deep, and it has a built-in ceiling.

The buyers keep signing in public

The government of Puebla, Mexico is tendering for two Cellebrite extraction systems↗ plus a package of 150 unlocks for advanced devices, with the award due between November 6 and 11, 2026, and eight state attorney general staff lined up for training ⁴.

The rival supply is thinning too. Federal prosecutors charged Lee Reiber↗, chief executive of the Virginia-based competitor Oxygen Forensics, and a Moscow businessman with conspiracy to commit wire fraud for allegedly hiding the firm's Russian ownership; investigators seized its bank accounts and roughly 57 web domains ⁵. With that rival sidelined, Cellebrite is the listed incumbent for agencies that still need phones opened, and management guided third-quarter revenue to $145 million to $148 million ³, against $126.03 million a year earlier ⁶.

Nine Buy ratings against one August day

The bull case is documented: second-quarter revenue of $131.14 million, up 16 percent; annual recurring revenue of $508 million, up 21 percent; defense and intelligence ARR up 25 percent ⁷. Nine analysts rate the stock Buy and none Sell↗, at a $14.13 consensus target ⁷.

What that does not resolve is August 13, 2026: ARR of $507.8 million, below the company's own $510 million to $513 million projection; a full-year ARR cut of roughly $15 million at the midpoint, blamed on a foreign-entity permit requirement applied to cloud technology; chief executive Tom Hogan replaced, effective immediately, by Shiv Ramji; and a 29 percent single-day fall to $10.80↗ ⁸. Kaplan Fox, a plaintiffs' securities firm, is investigating potential violations ⁸.

The stock, and the stake that showed up

The stock closed at $11.03 on October 16↗, 44.79 percent below its $19.98 high, at 47.16 times trailing earnings ³. Along for the ride sits Pertento Partners, an investment firm that filed a passive Schedule 13G on October 9↗ disclosing 5.2 percent of the company, held for advisory clients with no intent to influence control ⁹.

November 11 settles it

Puebla's award window opens on November 6; Cellebrite reports third-quarter results on November 11 ³⁴. The tell is ARR: re-acceleration toward the $550 million to $560 million full-year range ¹⁰ says capability still converts into contracts; a second cut, on top of the August permit drag ⁸, says the overhang is the business. The silicon hole is permanent; the credibility hole from August is the one management has to close on November 11.