Skip to content
skopnix
Section C · The archive · Dispatch
← The archive

vulnerability · Sat 15 Aug 2026 · 08:34 UTC

Actively exploited

[KEV] CVE-2026-65400: Apple macOS Improper Authentication Vulnerability

Filed UTCSource SCA ↗also carried by 2 outlets

Apple macOS contains an improper authentication vulnerability that could allow an attacker on the network to authenticate to Screen Sharing without valid credentials.

Signals

as the pipeline stamped them
KEV
Active exploitation (KEV)
What to do
  1. On CISA KEV — actively exploited. Patch immediately.

CISA KEV means this flaw has been seen exploited in real attacks — not predicted, observed. Treat it as urgent regardless of its score.

CVE

KEV from CISA · EPSS from FIRST
CVE ids in this dispatch with their KEV status and EPSS score
IdKEVEPSSReference
CVE-2026-65400KEV2%NVD ↗

Sources · 3

outlets reporting the same story
  1. SCAsecurityaffairs.comPrimary ↗
  2. BLCbleepingcomputer.comAlso ↗
  3. SCWsecurityweek.comAlso ↗

Get the next one first.

Every dispatch goes to Telegram and RSS the moment it is published, and the whole wire is a keyless JSON API.

Follow on TelegramKEV RSSAPI

Check your stack

Paste what you run: the CVEs exploited in the wild against it, and who is cited as exploiting them, with the report.

Stack checkNo key. No signup.