Vulnerability intelligence

CVE-2026-28950

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 15.8.8 and iPadOS 15.8.8, iOS 16.7.16 and iPadOS 16.7.16, iOS 18.7.8 and iPadOS 18.7.8, iOS 26.4.2 and iPadOS 26.4.2, iPadOS 17.7.11. Notifications marked for deletion could be unexpectedly retained on the device.

CVSS Score

—

Unrated

EPSS — Exploit Probability

2.9%

Riskier than 85% of all CVEs

Exploitation

Not in CISA KEV

No federal exploitation record

Remediation

unknown

Check vendor advisories

NVD entry PoC / advisory

5 articles across 5 outlets · first covered Apr 23, 2026 · latest Apr 23, 2026

Coverage timeline

iOS Flaw Let Deleted Notifications Linger, Apple Issues Fix
securityaffairs.com · Apr 23, 2026
Apple patches CVE-2026-28950 bug that kept deleted messages
www.infosecurity-magazine.com · Apr 23, 2026
Apple patches iOS bug CVE-2026-28950 exposing deleted alerts
www.malwarebytes.com · Apr 23, 2026
Apple Patches iOS Flaw That Stored Deleted Signal Notifications in FBI Forensic Case
thehackernews.com · Apr 23, 2026
Apple patches iOS bug letting deleted Signal messages resurface
www.securityweek.com · Apr 23, 2026