Is CVE-2026-28950 actively exploited?

No active exploitation of CVE-2026-28950 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-28950 be exploited remotely?

No. CVE-2026-28950 requires local access to exploit.

What is the CVSS score of CVE-2026-28950?

CVE-2026-28950 has a CVSS score of 6.2 (MEDIUM).

HOME VULNERABILITIESCVE-2026-28950

MEDIUM

CVE-2026-28950

Published: April 22, 2026· Updated: Apr 27, 2026

6.2

CVSS v3.1

EPSS:0.01%probability of exploitation in 30 daysPercentile:1.9th

Official Description

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.8 and iPadOS 18.7.8, iOS 26.4.2 and iPadOS 26.4.2. Notifications marked for deletion could be unexpectedly retained on the device.

NVD Source

Technical Analysis

CVE-2026-28950 requires local access, meaning attackers must already have a foothold on the target system.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), with a CVSS base score of 6.2.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorLocal

Attack ComplexityLow

Privileges Req.None

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityHigh

IntegrityNone

AvailabilityNone

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected Vendors & Products

Apple2 products

ipadosiphone os

Source: NVD CPE · 2 total CPE entries

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time

Exploit-DB

Offensive Security exploit database

GitHub PoC Search

Community PoC repositories

Rapid7 / Metasploit

Metasploit module search

PacketStorm

Security advisories & exploits

External links open in a new tab. Always verify in a controlled environment before use.

Official Patches & Advisories

ADVISORYhttps://support.apple.com/en-us/127002

ADVISORYhttps://support.apple.com/en-us/127003

News & Research Mentioning CVE-2026-28950

Apple Patches Exploited Notification Flaw, (Thu, Apr 23rd)

SANS ISC· Apr 23, 2026

Apple yesterday released iOS/iPadOS 26.4.2 and iOS/iPadOS 18.7.8. This update fixes a single Notification Services vulnerability, CVE-2026-28950: [xlite_meta score:54 src:SANS ISC xlite_fp:29c8d20972163f619faefd69a515b63fd63b4476013540e9f204fd6562b24b53]

Apple Fixes iOS Flaw That Let FBI Recover Deleted Signal Messages

The Hacker News· Apr 23, 2026

Apple has rolled out a software fix for iOS and iPadOS to address a Notification Services flaw that stored notifications marked for deletion on the device. The vulnerability, tracked as CVE-2026-28950 (CVSS score: N/A), has been described as a logging issue that has been addressed with improved data redaction. "Notifications marked for deletion could be unexpectedly retained on the device," [xlite_meta score:50 src:The Hacker News xlite_fp:23509408678e706c0eb3e72512bb513ec10888ac0bab57427ddbdee55a02ba69]