LPE Vulnerability in Symantec CleanWipe Removal Tool for macOS (CVE-2026-11626)

Vulnerability Overview Vulnerability Name: CleanWipe Removal Tool for ESA SEP 16 (macOS) CVE Number: CVE-2026-11626 Severity: Medium CVSS Score: Not provided Publication Date: June 10, 2026 Last Update Date: June 10, 2026 Status: Closed Impact Scope Affected Product: CleanWipe Removal Tool for ESA SEP 16 (macOS) Affected Versions: Versions prior to 16.0.0.65 Vulnerability Type: Local Privilege Escalation Description: The CleanWipe Removal Tool (macOS) in versions prior to 16.0.0.65 may contain a local privilege escalation vulnerability. Attackers can exploit this vulnerability to escalate privileges and gain administrative control over the affected system. Remediation Fixed Version: Version 16.0.0.65 or higher Remediation Measures: - Download the CleanWipe Removal Tool to uninstall Endpoint Protection. - Restrict access to administrative systems, authorizing only privileged users. - Restrict remote access, authorizing only trusted systems. - Follow the principle of least privilege to minimize the impact of potential exploitation. - Keep all operating systems and applications up to date with the latest patches. - Adopt a layered security approach, ensuring at least a firewall and anti-malware applications are running to provide multiple detection and protection points. - Deploy network- and host-based intrusion detection systems (IDS) to monitor for anomalous or suspicious activity in network traffic, helping to detect attacks or malicious activity related to the vulnerability. Additional Information Reference Links: NVD: CVE-2026-11626 Contributor: Kun Peeks (@SwayG0121yy) Code Block No POC code or exploit code is included on the page.

Goal Reached Thanks to every supporter — we hit 100%!

LPE Vulnerability in Symantec CleanWipe Removal Tool for macOS (CVE-2026-11626)