CVE-2026-112430
Apple Macos: authentication bypass can lead to privilege escalation
- Risk score
- 50/100
- CVSS
- 7.8 v3.1
- Exploit chance (30 days)
- 0.3%
- Published
- 26 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- An authentication issue was addressed with improved validation of user attributes. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges.
- Affected
- Apple Macos
- Fix
- Apply the vendor's security update; see the linked advisory.
- Exploitation
- No known exploitation
Story map
At a glance
Apple Macos: Red, act today. An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1, macOS Tahoe 26.7. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials.
The flaws
- CVE-2026-112430: Authentication bypass can lead to privilege escalation (CVSS 7.8 · EPSS 0%)
- CVE-2026-65400: Apple macOS Improper Authentication Vulnerability (CVSS 9.8 · exploited)
- CVE-2026-86868: Authentication bypass (CVSS 9.1 · EPSS 0%)
- CVE-2026-84579: A logic issue was addressed with improved checks (CVSS 8.8 · EPSS 1%)
The fix
Fix: Apply the vendor's security update; see the linked advisory.
Who is exposed: Apple Macos
Where it stands
- Exploited in the wild
- On CISA's exploited list since 18 Aug
- US federal deadline 21 Aug
- 1 outlet covering it
How it unfolded
- 18 Aug, CISA (official): Added to the Known Exploited Vulnerabilities list
- 21 Aug, Deadline (official): US federal agencies must have patched
- 26 Oct, SANS Internet Storm Center (press): Apple Patches for October 2026, (Mon, Oct 26th)
Connects to
- Same weakness: Authentication bypass (CWE-287). 306 other warnings in 30 days
- Same product: Earlier Apple Macos warnings. 82 in the last 90 days
- Reported alongside: An access issue was addressed with improved access restrictions. CVE-2026-86990 · in 1 of the same article
In the news
TL;DR
Apple patches 304 vulnerabilities, including an authentication issue in macOS that could allow an app to gain root privileges.
- CVE-2026-112430: authentication issue in macOS, fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2.
- SecurityWeek reports that the vulnerability is not yet known to be exploited in the wild.
- Apple released patches for 304 vulnerabilities, including this one, in their October 2026 update.
- The vulnerability is rated CVSS 7.8 high and is fixed in specific macOS versions.
AI summary of 1 article.
Why it is Yellow
- CVSS 7.8 high
References
Original description
An authentication issue was addressed with improved validation of user attributes. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges.
Last activity 26 Oct 2026. Patch Forecast updates every hour.