Protego field desk
PROTEGO
← CVE Lookup

CVE-2026-65400

CRITICALCVSS 3.1 · 9.8 · 134c704f-9b21-4f2e-91b3-4a467353bcc0

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1, macOS Tahoe 26.7. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials.

CISA KEV: known exploited

Added: 2026-08-18 · Due: 2026-08-21

Known ransomware use: Unknown

EPSS: 1.72% · Percentile: 77.4%

As of 2026-10-27

EPSS estimates exploitation probability over the next 30 days. KEV due dates apply to US federal civilian agencies. Confirm your affected versions in vendor advisories.

CWE: CWE-287 · Published: 2026-08-06T22:18:14.533 · Modified: 2026-10-24T16:10:00.153

Sources: NIST NVD, CISA KEV, FIRST EPSS. NVD and EPSS cached up to 6 hours; KEV up to 12 hours.

References and fixes