VDB
CVE-2026-20649
CVE-2026-20649
PUBLISHED
CVSS 7.5 HIGH
A logging issue was addressed with improved data redaction. This issue is fixed in watchOS 26.3, iOS 26.3 and iPadOS 26.3, tvOS 26.3, macOS Tahoe 26.3. A user may be able to view sensitive user information.
EPSS 0.03% · 10.3th percentile
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.03%
10.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | macOS | 0 |
| apple | macos | 0 |
| Apple | tvOS | 0 |
| apple | iphone_os | 0 |
| apple | watchos | 0 |
| apple | tvos | 0 |
| Apple | watchOS | 0 |
| apple | ipados | 0 |
| Apple | iOS and iPadOS | 0 |
Exploit Intelligence
- CIRCL seen: CVE-2026-20649 (circl-sighting)
- https://support.apple.com/en-us/126346 (circl)
- https://support.apple.com/en-us/126348 (circl)
- https://support.apple.com/en-us/126351 (circl)
- https://support.apple.com/en-us/126352 (circl)
- ios_v2_generated.go (github-poc)
- ios_v1_generated.go (github-poc)
- macos_v2_generated.go (github-poc)
- macos_v2_generated.go (github-poc)
- macos_v2_generated.go (github-poc)
…and 25 more exploits
Timeline
- Feb 11, 2026 CVE Published
- Feb 12, 2026 EPSS Score
- Feb 13, 2026 PoC Published
- Feb 14, 2026 EPSS Score
- Feb 16, 2026 EPSS Score
- Feb 18, 2026 EPSS Score
- Feb 20, 2026 EPSS Score
- Feb 22, 2026 EPSS Score
- Feb 24, 2026 EPSS Score
- Feb 26, 2026 EPSS Score
- Feb 28, 2026 EPSS Score
- Mar 2, 2026 EPSS Score
References
- https://support.apple.com/en-us/126346 advisory
- https://support.apple.com/en-us/126353 advisory
- https://support.apple.com/en-us/126347 advisory
- https://support.apple.com/en-us/126352 advisory
- https://support.apple.com/en-us/126348 advisory
- https://support.apple.com/en-us/126349 advisory
- https://support.apple.com/en-us/126351 advisory
- https://support.apple.com/en-us/126350 advisory
- https://support.apple.com/en-us/126354 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-20649 advisory