Paper/Archive/CVE-2026-18367

CVE-2026-18367

Sophos Sophos Endpoint for macOS — A privilege escalation vulnerability allows local users to execute arbitrary code as root via Sophos Endpoint for macOS older than versio…

EPSS 0.2%CVSS 9.3

critical.is priorityof 100

CVSS 9.3 (CNA)9.3 / 10 × 3027.9 Not in CISA KEV+300.0 EPSS percentile 7.2.072 × 201.4 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

A privilege escalation vulnerability allows local users to execute arbitrary code as root via Sophos Endpoint for macOS older than version 2026.1.1 and Sophos Home for macOS older than version 10.11.6.

Affected

ProductAffectedFixed inSource

Sophos Endpoint for macOS< 2026.1.12026.1.1CNA

Sophos Home for macOS< 10.11.610.11.6CNA

Scores by source

Sophos (CNA)9.3CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refsophos.com/security-advisories/sophos-sa-20260806-ep-macos-lpe