PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-11626 Broadcom CVE debrief

CVE-2026-11626 is a Local Privilege Escalation vulnerability in CleanWipe Removal Tool (macOS) prior to version 16.0.0.65. An attacker with limited privilege access on an affected system can escalate their privileges to gain administrative control. The CVSS score for this vulnerability is 5.4, with a severity rating of MEDIUM.

Vendor
Broadcom
Product
Symantec Endpoint Protection CleanWipe Removal Tool
CVSS
MEDIUM 5.4
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-10
Original CVE updated
2026-06-10
Advisory published
2026-06-10
Advisory updated
2026-06-10

Who should care

Users of CleanWipe Removal Tool (macOS) prior to version 16.0.0.65 should apply the patch to prevent potential Local Privilege Escalation attacks.

Technical summary

The CleanWipe Removal Tool (macOS), prior to 16.0.0.65, may be susceptible to an Local Privilege Escalation vulnerability. This type of issue allows an attacker with limited privilege access on an affected system to escalate their privileges to gain administrative control.

Defensive priority

MEDIUM

Recommended defensive actions

  • Apply the patch for CleanWipe Removal Tool (macOS) version 16.0.0.65 or later.
  • Review and update the CleanWipe Removal Tool to the latest version.

Evidence notes

The CVE-2026-11626 vulnerability has a CVSS score of 5.4 and a severity rating of MEDIUM. The vulnerability was published on 2026-06-10T19:16:33.417Z and modified on 2026-06-10T20:13:47.847Z.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-11626 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-11626

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-11626 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-11626

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source reference

    Unverified legacy reference

    URL: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37625

    [email protected]

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.