CVE-2026-18367

—

CVSS 3.1

9.3 critical

EPSS

<1%p3

Published

Aug 6, 2026 (Aug 6, 2026)

Modified

Sep 1, 2026

Description

A privilege escalation vulnerability allows local users to execute arbitrary code as root via Sophos Endpoint for macOS older than version 2026.1.1 and Sophos Home for macOS older than version 10.11.6.

Weakness: CWE-285
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.1%)

In the news0 stories

No ingested article mentions this CVE yet.