CVE-2026-18367 — Sophos / Sophos Endpoint for macOS

CVE-2026-18367

Sophos / Sophos Endpoint for macOS PUBLISHED

Description (CNA)

A privilege escalation vulnerability allows local users to execute arbitrary code as root via Sophos Endpoint for macOS older than version 2026.1.1 and Sophos Home for macOS older than version 10.11.6.

Affected (CNA)

Vendor / product	Versions
Sophos / Sophos Endpoint for macOS	affected 0 before 2026.1.1
Sophos / Sophos Home for macOS	affected 0 before 10.11.6

CWE

CWE-285

References

https://www.sophos.com/security-advisories/sophos-sa-20260806-ep-macos-lpe

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.