macOS Screen Sharing ATTACH authenticated as root via SRP (CVE-2026-65400)

Ethan Andrews@eandrews

•updated Aug 14, 2026•7•0•18

Detects unauthorized macOS Screen Sharing (screensharingd) attachment attempts using the 'root' user account via the Secure Remote Password (SRP) authentication mechanism, specifically targeting an authentication bypass vulnerability.