Privilege Escalation in Sophos Endpoint Mac <2026.1.1 & Home Mac <10.11.6
CVE-2026-18367 Published on August 6, 2026
A privilege escalation vulnerability allows local users to execute arbitrary code as root via Sophos Endpoint for macOS older than version 2026.1.1 and Sophos Home for macOS older than version 10.11.6.
Vulnerability Analysis
CVE-2026-18367 can be exploited with local system access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be critical as this vulnerability has a high impact to the confidentiality, integrity and availability of this component.
Weakness Type
What is an AuthZ Vulnerability?
The software does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
CVE-2026-18367 has been classified to as an AuthZ vulnerability or weakness.
Products Associated with CVE-2026-18367
stack.watch emails you whenever new vulnerabilities are published in Sophos Endpoint For Macos or Sophos Home For Macos. Just hit a watch button to start following.
Affected Versions
Sophos Endpoint for macOS:- Before 2026.1.1 is affected.
- Before 10.11.6 is affected.