CVE-2026-65400

Published: Aug 6, 2026Modified: Oct 23, 2026CISA KEV

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1, macOS Tahoe 26.7. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials.

Affected (3)

Products: Apple: Macos

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Apple Macos	14.0 ≤ version < 14.8.9
Apple Macos	15.0 ≤ version < 15.7.9
Apple Macos	26.0 ≤ version < 26.6.1

Related CWEs

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (9)

https://support.apple.com/en-us/148170

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/148171

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/148172

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/149035

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/149042

Source: product-security@apple.com

Release NotesVendor Advisory

http://seclists.org/fulldisclosure/2026/Aug/36

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://seclists.org/fulldisclosure/2026/Aug/37

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

https://advisories.ncsc.nl/2026/ncsc-2026-0280.html

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Third Party Advisory

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-65400

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

US Government Resource

Timeline

No history available yet.