Non-screensharingd process binds macOS Screen Sharing port 5900 (CVE-2026-43779)

Duo Tech@duotech

•updated Aug 17, 2026•6•0•18

Detects a process other than screensharingd binding to macOS Screen Sharing port 5900 shortly after being newly spawned, indicating potential exploitation of the CVE-2026-43779 connection-interception logic flaw.