CVE Vulnerabilities

CVE-2026-20668

Insertion of Sensitive Information into Log File

Published: Mar 25, 2026 | Modified: Mar 25, 2026
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.3, visionOS 26.3. An app may be able to access sensitive user data.

Weakness

The product writes sensitive information to a log file.

Affected Software

NameVendorStart VersionEnd Version
IpadosApple*18.7.7 (excluding)
IpadosApple26.0 (including)26.3 (excluding)
Iphone_osApple*18.7.7 (excluding)
Iphone_osApple26.0 (including)26.3 (excluding)
MacosApple*14.8.5 (excluding)
MacosApple15.0 (including)15.7.5 (excluding)
MacosApple26.0 (including)26.3 (excluding)
VisionosApple*26.3 (excluding)

Potential Mitigations

References