Apple has released iOS 26.4.2, which address a problem in Notification Services, where notifications marked for deletion could be unexpectedly retained on the device.
The problem has now been fixed with a logging issue with improved redaction.
The vulnerability became known when recent court testimony revealed that the FBI was able to access an internal notification database on an iPhone involved in a federal case in Texas.
The FBI was able to forensically extract copies of incoming Signal messages from a defendant’s iPhone, even after the app was deleted, because copies of the content were saved in the device’s push notification database.
Interestingly, Apple did not state that the vulnerability has been exploited, leaving it initially unconfirmed that CVE-2026-28950 is the flaw that was leveraged by the authorities.
However, Signal eventually confirmed that CVE-2026-28950 and the bug used by the FBI were one and the same.
“We’re grateful to Apple for the quick action here, and for understanding and acting on the stakes of this kind of issue. It takes an ecosystem to preserve the fundamental human right to private communication,” Signal stated.
iOS 26.4.2 Security Updates
Available for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later
Impact: Notifications marked for deletion could be unexpectedly retained on the device
Description: A logging issue was addressed with improved data redaction.
iOS 26.4.2 Supported Devices
- iPhone 17
- iPhone 17 Pro
- iPhone 17 Pro Max
- iPhone Air
- iPhone 16
- iPhone 16 Plus
- iPhone 16 Pro
- iPhone 16 Pro Max
- iPhone 15
- iPhone 15 Plus
- iPhone 15 Pro
- iPhone 15 Pro Max
- iPhone 14
- iPhone 14 Plus
- iPhone 14 Pro
- iPhone 14 Pro Max
- iPhone 13
- iPhone 13 mini
- iPhone 13 Pro
- iPhone 13 Pro Max
- iPhone 12
- iPhone 12 mini
- iPhone 12 Pro
- iPhone 12 Pro Max
- iPhone 11
- iPhone 11 Pro
- iPhone 11 Pro Max
To update to iOS 26.4.2 go to your iPhone Settings > General > Software Update and install 26.4.2 as soon as you possibly can.
