by Kastro
Paper/Archive/CVE-2026-65400

CVE-2026-65400

Apple macOS — Apple macOS Improper Authentication Vulnerability

KEV · due 21 AugEPSS 2%public exploitSSVC actCVSS 9.8
critical.is priorityof 100
95
CVSS 9.8 (ADP)9.8 / 10 × 3029.4In CISA KEV+3030.0EPSS percentile 77.5.775 × 2015.5Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1, macOS Tahoe 26.7. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials.

Affected

ProductAffectedFixed inSource
macOS< 14.8.914.8.9CNA
macOS< 15.7.915.7.9CNA
macOS< 26.6.126.6.1CNA
macOS< 26.726.7CNA
macOS< 2727CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

refsupport.apple.com/en-us/148170refsupport.apple.com/en-us/148171refsupport.apple.com/en-us/148172refsupport.apple.com/en-us/149035refsupport.apple.com/en-us/149042writeupadvisories.ncsc.nl/2026/ncsc-2026-0280.htmlrefcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-65400refseclists.org/fulldisclosure/2026/Aug/36refseclists.org/fulldisclosure/2026/Aug/37kevcisa.gov/known-exploited-vulnerabilities-catalog