CVE-2026-65400

CVSS

—

EPSS

0.012 (67.3th percentile)

CISA KEV

Added 2026-08-18, due 2026-08-21

Exploitation

Reported by the vendor

Public exploits

3 repositories

State

Unknown

Coverage

• 

  ● Actively exploitedCritical 100Huntress07 Aug, 19:00

  From Screen Share to Root Access: Breaking Down CVE-2026-43760 and CVE-2026-65400 on macOS

  Apple’s latest macOS update addresses two vulnerabilities in its Screen Sharing server, including one that enables pre-authenticated remote code execution.

  ↗huntress.com/blog/macos-screen-sharing-rce-patc…(opens the publisher's site in a new tab)

What we observed

1. 25 Sept, 10:15vendor exploitedapple-sofa
2. 25 Sept, 10:15vendor exploitedapple-sofa
3. 25 Sept, 10:15vendor exploitedapple-sofa
4. 25 Sept, 10:15vendor exploitedapple-sofa
5. 25 Sept, 10:15vendor exploitedapple-sofa
6. 25 Sept, 10:00vendor exploitedapple-sofa
7. 25 Sept, 10:00vendor exploitedapple-sofa
8. 25 Sept, 10:00vendor exploitedapple-sofa
9. 25 Sept, 10:00vendor exploitedapple-sofa
10. 25 Sept, 10:00vendor exploitedapple-sofa
11. 25 Sept, 09:45vendor exploitedapple-sofa
12. 25 Sept, 09:45vendor exploitedapple-sofa
13. 25 Sept, 09:45vendor exploitedapple-sofa
14. 25 Sept, 09:45vendor exploitedapple-sofa
15. 25 Sept, 09:45vendor exploitedapple-sofa
16. 25 Sept, 09:30vendor exploitedapple-sofa
17. 25 Sept, 09:30vendor exploitedapple-sofa
18. 25 Sept, 09:30vendor exploitedapple-sofa
19. 25 Sept, 09:30vendor exploitedapple-sofa
20. 25 Sept, 09:30vendor exploitedapple-sofa
21. 25 Sept, 09:15vendor exploitedapple-sofa
22. 25 Sept, 09:15vendor exploitedapple-sofa
23. 25 Sept, 09:15vendor exploitedapple-sofa
24. 25 Sept, 09:15vendor exploitedapple-sofa
25. 25 Sept, 09:15vendor exploitedapple-sofa
26. 25 Sept, 09:00vendor exploitedapple-sofa
27. 25 Sept, 09:00vendor exploitedapple-sofa
28. 25 Sept, 09:00vendor exploitedapple-sofa
29. 25 Sept, 09:00vendor exploitedapple-sofa
30. 25 Sept, 09:00vendor exploitedapple-sofa
31. 25 Sept, 08:45vendor exploitedapple-sofa
32. 25 Sept, 08:45vendor exploitedapple-sofa
33. 25 Sept, 08:45vendor exploitedapple-sofa
34. 25 Sept, 08:45vendor exploitedapple-sofa
35. 25 Sept, 08:45vendor exploitedapple-sofa
36. 25 Sept, 08:30vendor exploitedapple-sofa
37. 25 Sept, 08:30vendor exploitedapple-sofa
38. 25 Sept, 08:30vendor exploitedapple-sofa
39. 25 Sept, 08:30vendor exploitedapple-sofa
40. 25 Sept, 08:30vendor exploitedapple-sofa
41. 25 Sept, 08:15vendor exploitedapple-sofa
42. 25 Sept, 08:15vendor exploitedapple-sofa
43. 25 Sept, 08:15vendor exploitedapple-sofa
44. 25 Sept, 08:15vendor exploitedapple-sofa
45. 25 Sept, 08:15vendor exploitedapple-sofa
46. 25 Sept, 08:00vendor exploitedapple-sofa
47. 25 Sept, 08:00vendor exploitedapple-sofa
48. 25 Sept, 08:00vendor exploitedapple-sofa
49. 25 Sept, 08:00vendor exploitedapple-sofa
50. 25 Sept, 08:00vendor exploitedapple-sofa