Apple macOS Improper Authentication Vulnerability

Apple macOS

Apple macOS contains an improper authentication vulnerability that could allow an attacker on the network to authenticate to Screen Sharing without valid credentials. Added to CISA KEV on 2026-08-18 (federal deadline 2026-08-21).

First seen: 18 Aug 2026
Last update: 18 Aug 2026, 12:00 UTC
Identifiers: CVE-2026-65400
Source: CISA KEV
On the menu as: Apple

Check this repository for exposure to one security incident from pwned.coffee. Report first, change nothing until I say so.

## Apple macOS Improper Authentication Vulnerability
Severity: high, exploited in the wild. Patch status: patched.
Affected: Apple macOS
Ids: CVE-2026-65400

Apple macOS contains an improper authentication vulnerability that could allow an attacker on the network to authenticate to Screen Sharing without valid credentials. Added to CISA KEV on 2026-08-18 (federal deadline 2026-08-21).

## Steps
1. Search the repo, its CI and infra config for Apple macOS. If present, report the version in use and whether it's affected.

## Report
A table: file, product or package, version in use, affected yes/no, exact fix. Then anything a human has to check outside the repo.

If you have the pwned.coffee MCP server (https://pwned.coffee/mcp), call lookup_cve("CVE-2026-65400") for the latest, and check_repo with this repo's lockfiles, Dockerfiles and workflows for a full receipt.
Sources: https://nvd.nist.gov/vuln/detail/CVE-2026-65400 https://support.apple.com/en-us/148170 https://support.apple.com/en-us/148171 https://support.apple.com/en-us/148172
https://pwned.coffee/i/apple-macos-improper-authentication-vulnerability-cve-2026-65400

Sources

Totalone hot coffee