CVE-2026-18367

CRITICAL

CVE: CVE-2026-18367 - A privilege escalation vulnerability allows local users to execute arbitrary code as root via Sophos Endpoint for macOS older than versio...Sign in to save

CVSS

9.3

CVSS v3.1

EPSS

0.1%

Exploit Prediction Score

Published

August 6, 2026

Exploitability

EPSS probability 0.1%

Description

A privilege escalation vulnerability allows local users to execute arbitrary code as root via Sophos Endpoint for macOS older than version 2026.1.1 and Sophos Home for macOS older than version 10.11.6.

Weaknesses

CWE-285

Affected Packages

No package data available.

Aliases

CVE-2026-18367

Related references

Publisher and database URLs for this record (shown for attribution; reading stays in Bugflare).

https://www.sophos.com/security-advisories/sophos-sa-20260806-ep-macos-lpe