CVE-2026-20649

High · 7.5

CVSS

7.5

EPSS

0.3%

Published

Feb 11, 2026

CISA due date

—

The record

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, watchOS 26.3. A user may be able to view sensitive user information.

Affected packages

Ecosystem	Package	Introduced	Fixed