CVE-2026-65400

Analyzed Analyzed - Analysis Complete

Authentication Bypass in macOS Screen Sharing

Publication date: 2026-08-06

Last updated on: 2026-08-19

Assigner: Apple Inc.

Description

An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-06

Last Modified

2026-08-19

Generated

2026-08-27

AI Q&A

2026-08-07

EPSS Evaluated

2026-08-26

NVD

CVE-2026-65400

Affected Vendors & Products

Vendor	Product	Version / Range
apple	macos	From 14.0 (inc) to 14.8.9 (exc)
apple	macos	From 15.0 (inc) to 15.7.9 (exc)
apple	macos	From 26.0 (inc) to 26.6.1 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-287	When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Attack-Flow Graph

Executive Summary

This vulnerability is an authentication issue caused by poor state management in macOS versions. It allows an attacker on the same network to bypass normal authentication and access Screen Sharing without valid credentials.

Detection Guidance

This vulnerability involves improper authentication in Screen Sharing. To detect it, check if Screen Sharing is enabled on your system and verify the version of macOS you are running. If you are on an affected version (macOS Sequoia before 15.7.9, macOS Sonoma before 14.8.9, or macOS Tahoe before 26.6.1), update immediately. Use the command 'systemsetup -getremotelogin' to check Screen Sharing status and 'sw_vers' to check your macOS version.

Impact Analysis

If exploited, an attacker could gain unauthorized access to your Mac's Screen Sharing feature, potentially viewing or controlling your system remotely without permission.

Compliance Impact

The vulnerability allows unauthorized network access to Screen Sharing without valid credentials, which could lead to unauthorized data exposure or access. This may violate data protection requirements under GDPR and HIPAA by enabling unauthorized access to sensitive information.

Mitigation Strategies

Update to the latest versions of macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, or macOS Tahoe 26.6.1 to address the authentication issue. Disable Screen Sharing if not needed and ensure network access controls are properly configured.

Hi! I’m here to help you understand CVE-2026-65400. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70