Apple Releases iOS 26.4.2 Security Update for iPhone and iPad Devices

Apple has released iOS 26.4.2 for iPhone and iPadOS 26.4.2 for iPad, addressing a security vulnerability in Notification Services that could allow deleted messages to be retained on devices. The update was made available on April 22, 2026, and applies to iPhone 11 and later models, as well as compatible iPad devices including iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later.

The security fix resolves an issue tracked as CVE-2026-28950, where notifications marked for deletion could be unexpectedly retained on the device. According to Apple’s support documentation, this was addressed through improved data redaction in the logging system. The company notes that it does not disclose, discuss, or confirm security issues until investigations are complete and patches are available.

Further reporting indicates that the vulnerability had allowed extraction of deleted Signal messages from notifications retained on the device. Forbes reported that the issue was serious enough to warrant an emergency update, with Apple urging users to install the patch promptly. The article noted that the same flaw exists in iOS 18.7.8 and iPadOS 18.7.8, which were also released for devices not running iOS 26.

Apple’s support page confirms that iOS 26.4.2 and iPadOS 26.4.2 include important security fixes as well as unspecified bug fixes. The update size ranges from 500MB to 1GB depending on the device. Users can install the update via Settings > General > Software Update, or through a computer using IPSW files for manual installation.

The update does not appear to affect Mac systems, as the most recent version of macOS remains Tahoe 26.4.1, with no public indication of a 26.4.2 release for Mac at this time. Apple’s security updates page has not been updated to include any Mac-related patches for this cycle.

Apple recommends that users back up their devices to iCloud before installing the update. The company maintains that third-party websites or products referenced in its security documents are provided without endorsement, and it assumes no responsibility for their selection, performance, or use.