Overview
- Apple released iOS 26.4.2 on Wednesday, delivering a security fix for an iPhone bug that let deleted notifications persist.
- Apple lists CVE-2026-28950 in Notification Services and says it fixed a logging error by improving data redaction.
- With Lock Screen previews turned on, iOS can save snippets of messages in an internal notification database, which meant some content lingered after deletion.
- Apple says the update also removes any notification copies that were already kept on the device by mistake.
- The same fix is available in iPadOS 26.4.2 and in iOS and iPadOS 18.7.8, and Apple urges users on those versions to update now as iOS 26.5 remains in testing for May.