CISA Warns of Apple macOS Vulnerability Exploited in Attack (CVE-2026-65400)
CISA added actively exploited macOS flaw CVE-2026-65400 to its KEV catalog, affecting Tahoe, Sequoia, and Sonoma, with a patch deadline of August 21, 2026.
72
Organization
Bynario Atlas
- Mentions · 7d0
- Mentions · 30d0
- All mentions3
- First seenAug 17, 2026
- Last mentionedAug 19, 2026
Timeline
3 articles · newest firstU.S. CISA adds Apple macOS, Microsoft SharePoint, Broadcom VMware vCenter, and Microsoft IKE flaws to its Known Exploited Vulnerabilities catalog
CISA adds actively exploited flaws in Microsoft IKE, SharePoint, VMware vCenter, and macOS Screen Sharing to KEV catalog, due August 21.
80
Attackers exploit patched macOS Screen Sharing flaw to deploy cryptominer
Attackers actively exploit patched macOS Screen Sharing bug CVE-2026-65400 on systems with port 5900 exposed, gaining root to install a Monero cryptominer.
70
Related CVEs
by mentions- CVE-2026-654002%9.8Authentication Bypass in Apple macOS Screen Sharing
- CVE-2026-3382477%9.8Unauthenticated Double-Free RCE in Microsoft Windows IKE Extension
- CVE-2026-593103%9.8Unauthenticated Path Traversal RCE in Broadcom VMware vCenter Server Syslog
- CVE-2026-5504070%9.1Authentication Bypass in Microsoft SharePoint Server
Appears with
- Applevendor · 3
- CISAorganization · 2
- macOSproduct · 2
- Screen Sharingproduct · 2
- Appleorganization · 2
- VMwarevendor · 1
- Dutch NCSCorganization · 1
- Defusedorganization · 1
- VMware vCenterproduct · 1
- Netherlands National Cyber Security Centreorganization · 1
- Windows IKEproduct · 1
- Federal Civilian Executive Branch agenciesvictim · 1
- Broadcomvendor · 1
- VMwareorganization · 1
- CISAvendor · 1
- Rapid7vendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.