Apple fixes the security flaw in iOS 26.4.2 that allowed access to deleted messages from apps like Signal

Apple has launched a security fix for iOS 26.4.2 and iPadOS 26.4.2, with which it solves a recently identified bug that allowed access deleted messages from apps like Signal on an iPhone, from the notification history.

The devices iPhone are some of those who more problems arise when retrieving information due to solutions such as app locking or hiding, Secure Enclave, app passwords, inactivity reset, and more.

However, recently the FBI managed to access messages from the Signal application deleted from an iPhone through the notification history, managing to recover them even after the messaging ‘app’ had been deleted from the device. For this, the forensic analysis focused on the iPhone push notification historywhich saved copies locally of incoming messages.

Now, Apple has released a security update for both iOS 26.4.2 and iPadOS 26.4.2 what fix this bug security issue, referred to as a logging issue through better data editing, identified as CVE-2026-28950.

This was shared in a statement on its support page, where it detailed that the problem allowed the notifications marked for deletion could be retained “unexpectedly” on the device.

Therefore, through this correction, will prevent the deleted messages of this type of instant messaging applications remain in the notification database of the operating system.

Specifically, this update is available for smartphones. iPhone 11 and later12.9-inch iPad Pro 3rd generation and later, 11-inch iPad Pro 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later.

However, it must be taken into account that, in the case of Signal, it has an option that Allows you to configure the content displayed in a notificationallowing you not to include the contact name or the text of the message.