A logic flaw allows an attacker with physical access to an iOS or iPadOS device to read notification contents that appear on the Lock Screen. This flaw is an example of improper access control, exposing potentially sensitive information to anyone who can pick up the device, but it does not provide code execution or broader system compromise.

Apple iOS and iPadOS devices running before the release of iOS 26 and iPadOS 26 are affected; the issue is fixed in those version releases.

The CVSS score of 2.4 and an EPSS score of less than 1% indicate a low overall risk. Because the vulnerability requires physical possession of the device, it is unlikely to be abused widely. However, if an attacker has access to an unattended device, they can read notifications and potentially acquire sensitive data displayed therein. This vulnerability is not listed in the CISA KEV catalog, underscoring its limited immediate threat but still warranting remediation to protect privacy.