CVE-2026-18367
Local Privilege Escalation in Sophos Endpoint and Home for macOS Allows Arbitrary Code Execution as Root
A privilege escalation vulnerability allows local users to execute arbitrary code as root via Sophos Endpoint for macOS older than version 2026.1.1 and Sophos Home for macOS older than version 10.11.6.
CVSS 3.1 · 9.3 Critical
EPSS < 1%
KEV · Not listed
Vendors
Products