macOS vulnerability: authenticate Screen Sharing without valid credentials

haxiomic1 pts0 comments

Calif on X: "PoC for a critical vulnerability in Apple macOS Screen Sharing (CVE-2026-65400).

If Screen Sharing is enabled, any network attacker can exploit the bug to log in as any account, without knowing the password.

We reverse engineered Apple’s unusual macOS 26.6.1 patch to understand https://t.co/WRIIwKx6yI" / X<br>Post

Log inSign up

Post

Calif

@calif_io

PoC for a critical vulnerability in Apple macOS Screen Sharing (CVE-2026-65400).

If Screen Sharing is enabled, any network attacker can exploit the bug to log in as any account, without knowing the password.

We reverse engineered Apple’s unusual macOS 26.6.1 patch to understand the root cause and exploitation path.

Please upgrade your macOS boxes to 26.6.1.

Full technical writeup drops tomorrow.

00:00

span:not(:empty)~span:not(:empty)]:before:content-['·'] [&>span:not(:empty)~span:not(:empty)]:before:px-1 [&>span:not(:empty)~span:not(:empty)]:before:shrink-0">9:32 AM · Aug 8, 2026126.1KViews

13<br>169<br>1.4K<br>567

span:not(:empty)~span:not(:empty)]:before:content-['·'] [&>span:not(:empty)~span:not(:empty)]:before:px-1 [&>span:not(:empty)~span:not(:empty)]:before:shrink-0 min-w-0 overflow-hidden">Nafiz Bayındır

@NafizBayindir

4h

Always use Screen Sharing behind VPN

11<br>2.4K

span:not(:empty)~span:not(:empty)]:before:content-['·'] [&>span:not(:empty)~span:not(:empty)]:before:px-1 [&>span:not(:empty)~span:not(:empty)]:before:shrink-0 min-w-0 overflow-hidden">Christopher Price

@chrisprice

7h

Any idea how far back this goes?

4.1K

span:not(:empty)~span:not(:empty)]:before:content-['·'] [&>span:not(:empty)~span:not(:empty)]:before:px-1 [&>span:not(:empty)~span:not(:empty)]:before:shrink-0 min-w-0 overflow-hidden">RKB Jaman

@rkbjaman

7h

How much for the bounty?

3.4K

Log in or sign up for X<br>See what’s happening and join the conversation<br>Continue with phoneContinue with AppleContinue with Google<br>or<br>Log in with username or email

Relevant people

Calif@calif_ioFollow<br>We're https://t.co/KTEDnC2VUV. Join us to make the Internet safer for your mum and everyone else: https://t.co/eUFMLkW9t2.

Trending now

span empty before macos screen sharing

Related Articles