macOS Golden Gate 27
macOS 27.0 known issues for MDM admins. Is it safe to deploy?
SupersededDeploy verdict: Superseded
Replaced by macOS 27.0.1 in the same major line. Target the newer build. This build wasn't reviewed separately.
Actively exploited vulnerabilities fixed in this release:
- CVE-2026-65400 · in CISA KEV
When an update fixes a vulnerability that's already being exploited, the case for patching quickly usually outweighs waiting for more reports.
Release facts
| Version | 27.0 |
|---|---|
| Build | 26A5428 |
| All builds | 26A5428, 26A428 |
| Release date | Sep 14, 2026 |
| Days since release | 44 |
| Security fixes (CVEs) | 276 |
| Actively exploited CVEs fixed | 1 |
Timing and deferral
- Superseded by macOS 27.0.1. Target the newer build unless you have a specific reason not to.
- SOFA expiration date: Dec 27, 2026 (in 60 days). This is the
ExpirationDateSOFA reports for this build, taken from Apple's update metadata. Treat it as the date Apple may stop offering this build. It isn't an Apple-announced signing deadline. - Deferral windows (calculated from the release date):
- 30-day deferral ends Oct 14, 2026 (passed)
- 60-day deferral ends Nov 13, 2026 (16 days left)
- 90-day deferral ends Dec 13, 2026 (46 days left)
Jamf Pro + Intune notes
Jamf Pro
- Apple removed legacy MDM software-update commands, the Software Update payload and the deferral keys in the Restrictions payload in macOS 27. Jamf says workflows that depend on them 'will fail silently or return stale data'. Move update management to the Software Updates and Software Update Settings blueprint components before you let Macs upgrade. (source)
- AFP file share distribution points can't be mounted on macOS 27. Switch to SMB or HTTPS. (source)
- Community report: local accounts created by Jamf Connect (without enrollment customization) aren't MDM-capable, so user-level declarations such as the new Accessibility app configuration can't be applied to them. (source)
- Der Flounder (Rich Trouton) reported that profile-based enrollment of macOS 27.0.0 virtual machines into Jamf Pro installs only the MDM profile. No further profiles or Jamf components arrive. This matters if you test in VMs. (source)
Microsoft Intune
- Apple removed legacy MDM software update settings and commands in OS 27. Message Center MC1470869 says Intune's October (2610) service release removes the legacy update UI, and devices without DDM software update policies 'may fail to update'. Use Settings catalog > Declarative Device Management > Software Update. (source)
- Platform SSO: admins reported 'Authentication failed' at login after moving to macOS 27.0.x, and Okta documented the issue. Apple's macOS 27.2 enterprise notes change when the new Platform SSO login UI is used by default and fix password sync for devices registered on macOS 26 or earlier. (source)