6.2 Medium
CVE-2026-28950
Apple iOS and iPadOS vulnerability
AppleiOS and iPadOS
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
0.2%probability of exploitation in the next 30 days
Higher than 8% of scored CVEs
SeverityCVSS
6.2Medium
Description NVD
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 15.8.8 and iPadOS 15.8.8, iOS 16.7.16 and iPadOS 16.7.16, iOS 18.7.8 and iPadOS 18.7.8, iOS 26.4.2 and iPadOS 26.4.2, iPadOS 17.7.11. Notifications marked for deletion could be unexpectedly retained on the device.
Coverage 6 articles · 6 outlets
See the full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Thu 23 Apr · 09:07 UTC | SecurityWeek | Apple patches iOS bug letting deleted Signal messages resurface |
| Thu 23 Apr · 09:11 UTC | The Hacker News | Apple Patches iOS Flaw That Stored Deleted Signal Notifications in FBI Forensic Case |
| Thu 23 Apr · 10:29 UTC | SANS ISC | Apple fixes iOS notification bug that exposed Signal chats to FBI |
| Thu 23 Apr · 11:00 UTC | Malwarebytes | Apple patches iOS bug CVE-2026-28950 exposing deleted alerts |
| Thu 23 Apr · 13:20 UTC | Infosecurity | Apple patches CVE-2026-28950 bug that kept deleted messages |
| Thu 23 Apr · 15:32 UTC | Security Affairs | iOS Flaw Let Deleted Notifications Linger, Apple Issues Fix |
- iOS Flaw Let Deleted Notifications Linger, Apple Issues FixSecurity Affairs
- Apple patches CVE-2026-28950 bug that kept deleted messagesInfosecurity
- Apple patches iOS bug CVE-2026-28950 exposing deleted alertsMalwarebytes
- Apple fixes iOS notification bug that exposed Signal chats to FBISANS ISC
- Apple Patches iOS Flaw That Stored Deleted Signal Notifications in FBI Forensic CaseThe Hacker News
- Apple patches iOS bug letting deleted Signal messages resurfaceSecurityWeek · first in our coverage