Vulnerabilities

CVSS

9.3 Critical

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Risk score

74.4

Published

2026-08-06

Status

Published

A privilege escalation vulnerability allows local users to execute arbitrary code as root via Sophos Endpoint for macOS older than version 2026.1.1 and Sophos Home for macOS older than version 10.11.6.

Weaknesses

CWE-285

Coverage 1

vulnerability

Vulnérabilité dans les produits Sophos (14 août 2026)

A critical vulnerability has been identified in Sophos products, allowing attackers to escalate privileges on macOS systems. This affects older versions of Intercept X Endpoint and Sophos Home, requiring immediate patchi…

CERT-FR · Aug 14, 2026 Critical

CVE-2026-18367macosvulnerabilityprivilege escalation

All articles mentioning it

Advisories and references

• sophos.com/security-advisories/sophos-sa-20260806-ep-macos-lpe