Apple Patches Mac Screen Sharing Flaw That Could Bypass Authentication

Apple released security updates for three macOS versions - Tahoe 26.6.1, Sequoia 15.7.9, and Sonoma 14.8.9 - on August 6 to address a recently discovered Screen Sharing vulnerability. The flaw, identified as CVE-2026-65400, allowed attackers on the same network to bypass authentication and gain unauthorized access to Mac systems.

Apple patched the issue through "improved state management" according to its security advisory, and attributed the discovery to security researcher Alfredo Pesoli. The vulnerability stems from Screen Sharing's implementation of Secure Remote Password, which could enable pre-authenticated remote code execution on all supported macOS versions.

While Apple has not confirmed if the vulnerability has been exploited in the wild, security experts have described the issue as potentially more severe. Users of the affected macOS versions are advised to install the latest security update through System Settings > General > Software Update. For users who do not require Screen Sharing, it is recommended to review if the feature is enabled and consider disabling it if unnecessary.