{"id":234735,"date":"2026-04-23T10:43:00","date_gmt":"2026-04-23T14:43:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/04\/23\/ios-26-4-2-update-now-warning-issued-to-all-iphone-users\/"},"modified":"2026-04-23T11:25:10","modified_gmt":"2026-04-23T15:25:10","slug":"ios-26-4-2-update-now-warning-issued-to-all-iphone-users","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/04\/23\/ios-26-4-2-update-now-warning-issued-to-all-iphone-users\/","title":{"rendered":"iOS 26.4.2\u2014Update Now Warning Issued To All iPhone Users"},"content":{"rendered":"

iOS 26.4.2\u2014Update Now Warning Issued To All iPhone Users<\/a><\/p>\n

https:\/\/www.forbes.com\/sites\/kateoflahertyuk\/2026\/04\/23\/ios-2642-and-ios-1878-update-now-warning-issued-to-iphone-users\/<\/a><\/p>\n

Publish Date: 2026-04-23 10:43:00<\/a><\/p>\n

Source Domain: www.forbes.com<\/a><\/p>\n

Apple’s iOS 26.4 and iOS 18.7.8 fix the same flaw, in Notification Services, where notifications marked for deletion could be unexpectedly retained on the device.<\/span><\/p>\n

Apple iPhone<\/p>\n

Update 10:45 a.m. EDT: This article, originally published at 03:47 a.m. EDT has been updated to include confirmation from Signal and expert commentary about the issue fixed in iOS 26.4.2 and iOS 18.7.8.<\/p>\n

Apple has released iOS 26.4.2 and iOS 18.7.8, along with a warning to update your iPhone now. That\u2019s because iOS 26.4 and iOS 18.7.8 fix a single security vulnerability in the iPhone software, which could be pretty serious. <\/p>\n

Apple doesn\u2019t provide much detail about what\u2019s fixed in iOS 26.4.2 and iOS 18.7.8, to allow as many users to upgrade before attackers can get hold of the details. But it does reveal that iOS 26.4 and iOS 18.7.8 fix the same flaw, in Notification Services, where notifications marked for deletion could be unexpectedly retained on the device, according to Apple\u2019s support page.<\/p>\n

Tracked as CVE-2026-28950, it seems the issue was released as an emergency update for a reason. It appears to be the same vulnerability used by the FBI to extract copies of incoming Signal messages from a defendant\u2019s iPhone due to copies of the content being saved in the push notification database, first reported by 404 Media.<\/p>\n

While Apple doesn\u2019t comment on the details of the fixes in iOS 18.7.8 and iOS 26.4.2, Bleeping Computer points out that \u201cits description of notifications being retained on the device closely aligns with the type of data persistence described in that report.\u201d<\/p>\n

I have asked Apple to comment and will update this article if the iPhone maker responds.<\/p>\n

Signal Confirms iOS 26.4.2 and iOS 18.7.8 Fix Known Issue<\/h2>\n

Signal has confirmed iOS 26.4.2 and iOS 18.7.8 fix the issue in question. \u201cWe are very happy that today Apple issued a patch and a security advisory,\u201d Signal wrote on X, formerly Twitter, adding that the move comes following 404 Media\u2019s reporting “that the FBI…<\/p>\n

Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

iOS 26.4.2\u2014Update Now Warning Issued To All iPhone Users https:\/\/www.forbes.com\/sites\/kateoflahertyuk\/2026\/04\/23\/ios-2642-and-ios-1878-update-now-warning-issued-to-iphone-users\/ Publish Date: 2026-04-23 10:43:00 Source…<\/p>\n","protected":false},"author":1,"featured_media":234736,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/imageio.forbes.com\/specials-images\/imageserve\/693d2bc81607dd2aa1d99822\/0x0.jpg?format=jpg&crop=1525,857,x0,y0,safe&height=900&width=1600&fit=bounds","fifu_image_alt":"","footnotes":""},"categories":[120],"tags":[90,89,69,95,77,124,57,27],"class_list":["post-234735","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-iphone","tag-cve","tag-flaw","tag-ios","tag-ios-18","tag-ios-26","tag-iphone-16","tag-security","tag-vulnerability"],"_links":{"self":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/234735"}],"collection":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=234735"}],"version-history":[{"count":1,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/234735\/revisions"}],"predecessor-version":[{"id":234737,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/234735\/revisions\/234737"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/234736"}],"wp:attachment":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=234735"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=234735"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=234735"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}