Apple’s leaked code points to a crowded product pipeline. The same macOS Tahoe 27.6 release candidate also exposes a serious Screen Sharing vulnerability that attackers have exploited in the wild, creating an awkward split-screen moment for Apple’s software and hardware plans.
References inside Tahoe 27.6 cover multiple product families, including home devices, headphones, iPhones, and iPads. The code does not confirm release dates or final product names, but it offers a detailed look at what Apple may be preparing behind the curtain.
Five codenames—V62, V63, V64, V67, and V68—likely refer to the iPhone Air 2, iPhone 18 Pro, iPhone 18 Pro Max, iPhone 18, and iPhone Ultra. That is a remarkable amount of future-phone housekeeping for a software release, though code has never been famous for respecting launch schedules.
Home devices and a long list of possible products
The upcoming Home Hub may carry the J490 codename and is rumored to arrive in September with a seven-inch display. It may run a new operating system called homeOS and show a dashboard similar to the iPhone’s StandBy mode, positioning the device as a fixed control center for the home.
The HomePod Mini may appear under the B525 codename and support an updated Siri with Apple Intelligence. That would give Apple’s smaller speaker a more capable assistant, assuming the software delivers more than another polished way to misunderstand a simple request.
Other references point to AirPods with Cameras, two new Beats headphone models, AirPods Pro 4 earbuds, and a second-generation Vision Pro headset identified as N109. The code also includes a new Apple TV remote, listed as ATVRemote1, and an iPad Mini identified as J510.
The rumored iPad Mini may feature an OLED display and an A19 Pro chip. Tahoe 27.6 also includes references to MacBook Pro models, including a likely M6 version, along with an iMac, suggesting the leak reaches across Apple’s hardware catalog rather than focusing on one product line.
Screen Sharing bug turns software exposure into a security problem
The product leaks would be the main story on their own. Instead, Apple is also dealing with CVE-2026-65400, a serious vulnerability in its Screen Sharing tool that has been exploited on multiple systems in the Netherlands.
Dutch officials with the Netherlands National Cyber Security Centrum warned that attackers gained root access and uploaded crypto mining software. If Screen Sharing is enabled, any network attacker can exploit the bug to log in as any account without knowing the password.
The access goes far beyond merely watching a desktop. Attackers can view screens, open files, and perform actions as if they had physical access to the computer; one description of the flaw said it lets an attacker “do just about anything else they want on the victim’s computer.”
Apple has issued software fixes for macOS Tahoe, Sequoia, and Sonoma, with new versions available. Users who cannot apply the updates can block Apple’s Screen Sharing tool in System Settings or close port 5900, which can prevent exploitation.
The timing makes the security issue harder to dismiss as a theoretical defect. On August 17, 2026, Lawrence Bonk reported that the bug had been seen in the wild, while on August 8, 2026, Calif (@calif_io) posted about reverse engineering Apple’s macOS 26.6.1 patch.
Zoom experienced a similar screen-sharing bug and issued a patch. The immediate lesson is less glamorous than a new headset or OLED tablet: update the affected Mac, disable Screen Sharing when it is not needed, and treat port 5900 as an open door rather than a harmless technical detail.
Based on
