CVE-2026-65400Vulnerability
Apple macOS Improper Authentication Vulnerability
Reported by 5 independent sources · first reported by Huntress · last reported
Last reported 27 days ago
Fix due 21 Aug 2026
Used by ransomware: not knownCISA KEV catalogue
higher than 77% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
5 reports, newest first · the exact sentence from each-
Cyber Brief 26-09 - August 2026“Exploitation of macOS Screen Sharing bypass (CVE-2026-65400) to deploy Monero miner”
-
Bulletin d'actualité CERTFR-2026-ACT-040 (21 septembre 2026)“CVE-2026-65400”
-
August 2026 CVE Landscape“CVE-2026-65400”
-
17th August – Threat Intelligence Report“Apple released patches for CVE-2026-65400, a critical macOS Screen Sharing authentication vulnerability with a CVSS score of 9.8.”
-
From Screen Share to Root Access: Breaking Down CVE-2026-43760 and CVE-2026-65400 on macOS“From Screen Share to Root Access: Breaking Down CVE-2026-43760 and CVE-2026-65400 on macOS”
Indicators reported together
named in the same reports- hxxps://www.ibm[.]com/support/pages/node/7287209in 1 report
- hxxps://www.ibm[.]com/support/pages/node/7287497in 1 report
- hxxps://www.ibm[.]com/support/pages/node/7287516in 1 report
Copy these 3 indicators · defanged
Also named with it: CVE-2026-68820, CVE-2025-49113, CVE-2026-60004, CVE-2026-64849, CVE-2026-33824, CVE-2026-58231, CVE-2026-0300, CVE-2026-33017, CVE-2017-0199, CVE-2022-0847, CVE-2026-87491, CVE-2025-14923, CVE-2026-11541, CVE-2026-75878, CVE-2026-8646, CVE-2025-39964, CVE-2026-34486
Thanks — we review every report.