CISA Warns of Apple macOS Vulnerability Exploited in Attack (CVE-2026-65400)
CISA added actively exploited macOS flaw CVE-2026-65400 to its KEV catalog, affecting Tahoe, Sequoia, and Sonoma, with a patch deadline of August 21, 2026.
CISA acknowledged active exploitation of CVE-2026-65400, an authentication flaw affecting macOS Tahoe, Sequoia, and Sonoma, and added it to the Known Exploited Vulnerabilities Catalog. The vulnerability was discovered and reported to Apple by Alfredo Pesoli via Bynario Atlas. The remediation deadline is August 21, 2026.
- CISA added CVE-2026-65400 to the KEV catalog
- Authentication flaw is actively exploited in attacks
- Affects macOS Tahoe, Sequoia, and Sonoma
- Reported to Apple by Alfredo Pesoli via Bynario Atlas
- Patching deadline set for August 21, 2026
- CVEs
- CVE-2026-65400
- Products
- macOS
- Organizations
- CISAAppleBynario Atlas
- Countries
- United States
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-65400 | Authentication Bypass in Apple macOS Screen Sharing | 9.8 | 2% | KEV | KEV |
From the original article
The U. S. Cybersecurity and Infrastructure Security Agency (CISA) recently acknowledged the active exploitation of the macOS vulnerability.
By Diksha Ojha · threatprotect.qualys.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.