// day
Aug 18, 2026
4 new incidents, 1 with updates.
## started
- highclosedpatchedclosed Aug 18, 2026
Apple macOS: Apple macOS Improper Authentication Vulnerability
› Apple macOS
Apple macOS contains an improper authentication vulnerability that could allow an attacker on the network to authenticate to Screen Sharing without valid credentials. Added to CISA KEV on 2026-08-18.
CVE-2026-65400 - highclosedpatchedclosed Aug 18, 2026
Broadcom VMware vCenter: Broadcom VMware vCenter Path Traversal Vulnerability
› Broadcom VMware vCenter
Broadcom VMware vCenter contains a path traversal vulnerability which could allow a threat actor with network access to vCenter to execute arbitrary code. Added to CISA KEV on 2026-08-18.
CVE-2026-59310 - highclosedpatchedclosed Aug 18, 2026
Microsoft Internet Key Exchange (IKE) Service Extensions: Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability
› Microsoft Internet Key Exchange (IKE) Service Extensions
Microsoft Internet Key Exchange (IKE) Service Extensions contains a double free vulnerability that could enable remote code execution. Added to CISA KEV on 2026-08-18.
CVE-2026-33824 - highclosedpatchedclosed Aug 18, 2026
Microsoft SharePoint: Microsoft SharePoint Weak Authentication Vulnerability
› Microsoft SharePoint
Microsoft SharePoint contains a weak authentication vulnerability which allows an unauthorized attacker to bypass a security feature over a network. Added to CISA KEV on 2026-08-18.
CVE-2026-55040
