A logging issue in Apple iOS and iPadOS allows an application to access and read log files that contain user‑sensitive data, resulting in a potential data leakage. This flaw stems from improper data redaction in the system logs and is classified as a CWE‑532 vulnerability, which concerns sensitive information overwritten or improperly measured in a log file.

Apple’s iOS and iPadOS operating systems are affected by this vulnerability. The issue is fixed in iOS 26.2 and iPadOS 26.2, meaning any device running an earlier version is at risk.

The CVSS score of 5.5 indicates moderate severity, while the EPSS score of less than 1% implies a low probability of exploitation in the wild; the vulnerability is not listed in CISA’s KEV catalog. The likely attack vector is local or through a malicious application that can read system logs, giving it access to exposed user data.