CVE-2026-18367

A privilege escalation vulnerability allows local users to execute arbitrary code as root via Sophos Endpoint for macOS older than version 2026.1.1 and Sophos Home for macOS older than version 10.11.6.

Score

CVSS 3.1 9.3 Critical

Status

Awaiting Analysis - security-alert@sophos.com

Published

2026-08-06

Last modified

2026-08-07

Weaknesses

CWE-285

Affected products

• Sophos Endpoint For Macos (Sophos)
• Sophos Home For Macos (Sophos)

References

• https://www.sophos.com/security-advisories/sophos-sa-20260806-ep-macos-lpe