Authentication Bypass in macOS Screen Sharing

Publication date: 2026-08-06

Last updated on: 2026-08-06

Assigner: Apple Inc.

Description

An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-06

Last Modified

2026-08-06

Generated

2026-08-07

AI Q&A

2026-08-07

EPSS Evaluated

N/A

NVD

CVE-2026-65400

Affected Vendors & Products

Vendor	Product	Version / Range
apple	macos_sequoia	15.7.9
apple	macos_sonoma	14.8.9
apple	macos_tahoe	26.6.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is an authentication issue caused by poor state management in macOS versions. It allows an attacker on the same network to bypass normal authentication and access Screen Sharing without valid credentials.

Impact Analysis

If exploited, an attacker could gain unauthorized access to your Mac's Screen Sharing feature, potentially viewing or controlling your system remotely without permission.

Mitigation Strategies

Update to the latest versions of macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, or macOS Tahoe 26.6.1 to address the authentication issue. Disable Screen Sharing if not needed and ensure network access controls are properly configured.

Hi! I’m here to help you understand CVE-2026-65400. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70