PatchSiren cyber security CVE debrief

CVE-2026-11626 Broadcom CVE debrief

CVE-2026-11626 is a Local Privilege Escalation vulnerability in CleanWipe Removal Tool (macOS) prior to version 16.0.0.65. An attacker with limited privilege access on an affected system can escalate their privileges to gain administrative control. The CVSS score for this vulnerability is 5.4, with a severity rating of MEDIUM.

Vendor: Broadcom
Product: Symantec Endpoint Protection CleanWipe Removal Tool
CVSS: MEDIUM 5.4
CISA KEV: Not listed in stored evidence
Original CVE published: 2026-06-10
Original CVE updated: 2026-06-10
Advisory published: 2026-06-10
Advisory updated: 2026-06-10

Who should care

Users of CleanWipe Removal Tool (macOS) prior to version 16.0.0.65 should apply the patch to prevent potential Local Privilege Escalation attacks.

Technical summary

The CleanWipe Removal Tool (macOS), prior to 16.0.0.65, may be susceptible to an Local Privilege Escalation vulnerability. This type of issue allows an attacker with limited privilege access on an affected system to escalate their privileges to gain administrative control.

Defensive priority

MEDIUM

Recommended defensive actions

Apply the patch for CleanWipe Removal Tool (macOS) version 16.0.0.65 or later.
Review and update the CleanWipe Removal Tool to the latest version.

Evidence notes

The CVE-2026-11626 vulnerability has a CVSS score of 5.4 and a severity rating of MEDIUM. The vulnerability was published on 2026-06-10T19:16:33.417Z and modified on 2026-06-10T20:13:47.847Z.

Official resources

CVE-2026-11626 was published on 2026-06-10T19:16:33.417Z and modified on 2026-06-10T20:13:47.847Z.