Dashboard / CVE-2026-28950

CVE-2026-28950

MEDIUM
MEDIUM Priority: 0.18 BB Relevance: 48/100
Published: 2026-04-22 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Low Complexity No Auth No Interaction Conf. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: None
UI: None
S: Unchanged
C: High
I: None
A: None

Description

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 15.8.8 and iPadOS 15.8.8, iOS 16.7.16 and iPadOS 16.7.16, iOS 18.7.8 and iPadOS 18.7.8, iOS 26.4.2 and iPadOS 26.4.2, iPadOS 17.7.11. Notifications marked for deletion could be unexpectedly retained on the device.

Weakness Classification (1)

Affected Software (4)

VendorProductVersion
apple ipados < 18.7.8
apple ipados 26.0 – 26.4.2
apple iphone_os < 18.7.8
apple iphone_os 26.0 – 26.4.2

References & Advisories (10)

https://support.apple.com/en-us/127002
Release Notes Vendor Advisory
https://support.apple.com/en-us/127003
Release Notes Vendor Advisory

Bug Bounty Relevance

48 / 100
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

6.2 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS — Exploitation Probability

2.88%
Raw Score 0.028800
Percentile 86.8%
Date 2026-10-29

EPSS Trend

2026-10-29
0.02880
2026-10-28
0.02880

Intelligence Sources

nvd ref →

External Links