CVE-2026-18367

A privilege escalation vulnerability in Sophos Endpoint and Sophos Home for macOS allows local users to execute arbitrary code with root privileges on affected versions prior to 2026.1.1 and 10.11.6, respectively. This critical flaw poses significant risks to system integrity and confidentiality, making it essential for organizations using these products to prioritize immediate updates to mitigate potential exploitation. Users of these Sophos solutions should take action to ensure they are running the latest versions to protect against this vulnerability.