# CVE-2026-65400

## Summary

- **CVE ID:** CVE-2026-65400
- **Severity:** CRITICAL
- **CVSS Score:** 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
- **CWE:** N/A
- **Published:** Aug 6, 2026
- **Last Modified:** Sep 14, 2026

## Description

An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials.

## Affected Products

- Apple — macOS (0)

## References

- [CNA](https://support.apple.com/en-us/148170)
- [CNA](https://support.apple.com/en-us/148171)
- [CNA](https://support.apple.com/en-us/148172)
- [CVE](http://seclists.org/fulldisclosure/2026/Aug/36)
- [CVE](http://seclists.org/fulldisclosure/2026/Aug/37)
- [CISA-ADP](https://advisories.ncsc.nl/2026/ncsc-2026-0280.html)
- [CISA-ADP](https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-65400)
- [CNA](https://support.apple.com/en-us/149035)
- [CNA](https://support.apple.com/en-us/149042)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 10.46%
- **EPSS Percentile:** 95.5

## Known Exploited Vulnerabilities (KEV)

- **Date Added:** Aug 18, 2026
- **Due Date:** Aug 21, 2026

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-17._