Apple iOS iPadOS Vulnerability Data Confidentiality Breach

Summary

CERT-FR issued advisory CERTFR-2026-AVI-0481 on April 23, 2026, warning of a vulnerability in Apple iOS and iPadOS that allows attackers to breach data confidentiality. The flaw affects iOS and iPadOS versions prior to 18.7.8 and 26.4.2. Affected users should apply Apple's security patches referenced in bulletins 127002 and 127003. The vulnerability is tracked as CVE-2026-28950.

About this source

CERT-FR is the French government's national cybersecurity incident response team, run by the ANSSI. Their advisory feed publishes vulnerability disclosures, active exploitation warnings, and emergency patching guidance for software in widespread enterprise use: browsers, hypervisors, ERP systems, network equipment, file transfer products. Around 180 advisories a month. The advisories are written in French but cover the same vulnerability universe as CISA, NCSC-UK, BSI's CERT-Bund, and JPCERT, often hours earlier on European-headquartered vendors. Watch this if you patch enterprise software, run a SOC, write detection content, or track Schneider, Dassault, OVH, Atos, or any French-vendor advisory faster than English-language sources will surface it. GovPing publishes each advisory with the affected vendor, severity, and CERT-FR link.

What changed

What to do next

1. Apply Apple's security patches from bulletins 127002 and 127003 to affected iOS and iPadOS devices

GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.

Related changes

Mattermost Server Vulnerability Advisory, Multiple Versions Affected

Priority review Apr 23, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity

CPython Security Policy Bypass Vulnerability

Priority review Apr 23, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity

F5 BIG-IP APM RCE Vulnerability Actively Exploited

Urgent Apr 23, 2026 • France CERT-FR Alerts • Data Privacy & Cybersecurity