CVE-2026-28950: Medium severity Apple iOS vulnerability
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 15.8.8 and iPadOS 15.8.8, iOS 16.7.16 and iPadOS 16.7.16, iOS 18.7.8 and iPadOS 18.7.8, iOS 26.4.2 and iPadOS 26.4.2, iPadOS 17.7.11. Notifications marked for deletion could be unexpectedly retained on the device.
Other sources
Notification Services. A logging issue was addressed with improved data redaction.
— Apple
Credit
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2026-28950?
CVE-2026-28950 has a medium severity due to the potential exposure of retained notification data.
How do I fix CVE-2026-28950?
To fix CVE-2026-28950, upgrade to iOS 18.7.8 or iPadOS 18.7.8, or iOS 26.4.2 or iPadOS 26.4.2.
What products are affected by CVE-2026-28950?
CVE-2026-28950 affects Apple iOS and iPadOS versions up to 18.7.8 and 26.4.2.
What type of issue does CVE-2026-28950 address?
CVE-2026-28950 addresses a logging issue related to data redaction in notification services.
What could be the consequence of CVE-2026-28950?
The consequence of CVE-2026-28950 is that notifications marked for deletion may remain unexpectedly on the device.