CVE-2026-28950

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 15.8.8 and iPadOS 15.8.8, iOS 16.7.16 and iPadOS 16.7.16, iOS 18.7.8 and iPadOS 18.7.8, iOS 26.4.2 and iPadOS 26.4.2, iPadOS 17.7.11. Notifications marked for deletion could be unexpectedly retained on the devi...

CVE-2026-28950

A logging issue in Notification Services on iOS and iPadOS caused notifications marked for deletion to be unexpectedly retained on the device. This flaw allowed for the potential retrieval of deleted content, including chat previews, from an internal push notification database even after the app ...

CVE-2026-28950

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.8 and iPadOS 18.7.8, iOS 26.4.2 and iPadOS 26.4.2. Notifications marked for deletion could be unexpectedly retained on the device...

CVE-2026-31486

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/core Protect regulator operations with mutex The regulator operations pmbusregulatorgetvoltage, pmbusregulatorsetvoltage, and pmbusregulatorlistvoltage access PMBus registers and shared data but were not protected by...

Apple iOS and Apple iPadOS security vulnerabilities

Apple iOS and Apple iPadOS are products of the American company Apple. Apple iOS is an operating system developed for mobile devices. Apple iPadOS is an operating system for iPad tablets. Versions of Apple iOS prior to 26.4.2 and Apple iPadOS prior to 26.4.2 contained security vulnerabilities...

CVE-2026-28950: Exposure of Private Personal Information to an Unauthorized Actor

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 15.8.8 and iPadOS 15.8.8, iOS 16.7.16 and iPadOS 16.7.16, iOS 18.7.8 and iPadOS 18.7.8, iOS 26.4.2 and iPadOS 26.4.2, iPadOS 17.7.11. Notifications marked for deletion could be unexpectedly retained on the devi...

Windows Push Notifications Privilege Escalation

The vulnerability of Windows push-notifications services is related to synchronization errors when using a shared resource “Race Conditions”. Exploiting this vulnerability can allow an attacker to increase their privileges...

About the security content of iOS 26.4.2 and iPadOS 26.4.2

About the security content of iOS 26.4.2 and iPadOS 26.4.2 This document describes the security content of iOS 26.4.2 and iPadOS 26.4.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

About the security content of iOS 18.7.8 and iPadOS 18.7.8

This document describes the security content of iOS 18.7.8 and iPadOS 18.7.8. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are list...

CVE-2026-40871 mailcow: dockerized vulnerable to Second Order SQL Injection in quarantine category via API

mailcow: dockerized is an open source groupware/email suite based on docker. Versions prior to 2026-03b have a second-order SQL injection vulnerability in the quarantinecategory field via the Mailcow API. The /api/v1/add/mailbox endpoint stores quarantinecategory without validation or sanitizatio...

io.spinnaker.echo:echo-api-tck (main-305), io.spinnaker.echo:echo-notifications (main-305) +6 more potentially affected by CVE-2026-32613 via io.spinnaker.echo:echo-pipelinetriggers (main-305)

io.spinnaker.echo:echo-pipelinetriggers MAVEN version main-305 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.echo:echo-pipelinetriggers and may be impacted: - io.spinnaker.echo:echo-api-tck main-305 - io.spinnaker.echo:echo-notifications...

io.spinnaker.echo:echo-api-tck (main-308), io.spinnaker.echo:echo-notifications (main-308) +6 more potentially affected by CVE-2026-32613 via io.spinnaker.echo:echo-pipelinetriggers (main-308)

io.spinnaker.echo:echo-pipelinetriggers MAVEN version main-308 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.echo:echo-pipelinetriggers and may be impacted: - io.spinnaker.echo:echo-api-tck main-308 - io.spinnaker.echo:echo-notifications...

io.spinnaker.echo:echo-api-tck (main-310), io.spinnaker.echo:echo-notifications (main-310) +6 more potentially affected by CVE-2026-32613 via io.spinnaker.echo:echo-pipelinetriggers (main-310)

io.spinnaker.echo:echo-pipelinetriggers MAVEN version main-310 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.echo:echo-pipelinetriggers and may be impacted: - io.spinnaker.echo:echo-api-tck main-310 - io.spinnaker.echo:echo-notifications...

io.spinnaker.echo:echo-api-tck (main-312), io.spinnaker.echo:echo-notifications (main-312) +6 more potentially affected by CVE-2026-32613 via io.spinnaker.echo:echo-pipelinetriggers (main-312)

io.spinnaker.echo:echo-pipelinetriggers MAVEN version main-312 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.echo:echo-pipelinetriggers and may be impacted: - io.spinnaker.echo:echo-api-tck main-312 - io.spinnaker.echo:echo-notifications...

io.spinnaker.echo:echo-api-tck (main-313), io.spinnaker.echo:echo-notifications (main-313) +6 more potentially affected by CVE-2026-32613 via io.spinnaker.echo:echo-pipelinetriggers (main-313)

io.spinnaker.echo:echo-pipelinetriggers MAVEN version main-313 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.echo:echo-pipelinetriggers and may be impacted: - io.spinnaker.echo:echo-api-tck main-313 - io.spinnaker.echo:echo-notifications...

io.spinnaker.echo:echo-api-tck (main-314), io.spinnaker.echo:echo-notifications (main-314) +6 more potentially affected by CVE-2026-32613 via io.spinnaker.echo:echo-pipelinetriggers (main-314)

io.spinnaker.echo:echo-pipelinetriggers MAVEN version main-314 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.echo:echo-pipelinetriggers and may be impacted: - io.spinnaker.echo:echo-api-tck main-314 - io.spinnaker.echo:echo-notifications...

io.spinnaker.echo:echo-api-tck (main-316), io.spinnaker.echo:echo-notifications (main-316) +6 more potentially affected by CVE-2026-32613 via io.spinnaker.echo:echo-pipelinetriggers (main-316)

io.spinnaker.echo:echo-pipelinetriggers MAVEN version main-316 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.echo:echo-pipelinetriggers and may be impacted: - io.spinnaker.echo:echo-api-tck main-316 - io.spinnaker.echo:echo-notifications...

io.spinnaker.echo:echo-api-tck (main-321), io.spinnaker.echo:echo-notifications (main-321) +6 more potentially affected by CVE-2026-32613 via io.spinnaker.echo:echo-pipelinetriggers (main-321)

io.spinnaker.echo:echo-pipelinetriggers MAVEN version main-321 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.echo:echo-pipelinetriggers and may be impacted: - io.spinnaker.echo:echo-api-tck main-321 - io.spinnaker.echo:echo-notifications...

io.spinnaker.echo:echo-api-tck (main-327), io.spinnaker.echo:echo-notifications (main-327) +6 more potentially affected by CVE-2026-32613 via io.spinnaker.echo:echo-pipelinetriggers (main-327)

io.spinnaker.echo:echo-pipelinetriggers MAVEN version main-327 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.echo:echo-pipelinetriggers and may be impacted: - io.spinnaker.echo:echo-api-tck main-327 - io.spinnaker.echo:echo-notifications...

io.spinnaker.echo:echo-api-tck (main-328), io.spinnaker.echo:echo-notifications (main-328) +6 more potentially affected by CVE-2026-32613 via io.spinnaker.echo:echo-pipelinetriggers (main-328)

io.spinnaker.echo:echo-pipelinetriggers MAVEN version main-328 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.echo:echo-pipelinetriggers and may be impacted: - io.spinnaker.echo:echo-api-tck main-328 - io.spinnaker.echo:echo-notifications...