CVE-2026-39118

CVE

Threat entity extracted from intelligence sources

Frequency

8

occurrences

First Seen

June 24, 2026

Last Seen

June 25, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

New macOS Flaw Allows Users to Disable Security Tools Without Admin Rights70.5

Researchers at XM Cyber have identified a macOS vulnerability that enables standard user accounts to disable enterprise security tools without requiring administrator credentials. This technique exploits the way macOS validates application trust, allowing attackers to impersonate trusted components...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

New macOS Flaw Allows Users to Disable Security Tools Without Admin Rights

Jun 24·12 sources

Related Articles (8)

macOS Flaw Lets Standard Users Disable EDR and MDM

Infosecurity-Magazine·Jun 25

Mallory.ai Technical Analysis

www.mallory.ai·Jun 25

SentinelOne Vulnerability Database: CVE-2026-39118

www.sentinelone.com·Jun 25

Critical CVE-2026-39118 Vulnerability in macOS Allows Users to Disable Kandji MDM ...

Rescana·Jun 25

macOS attack technique bypasses endpoint security tools

Feeds.Feedburner·Jun 24

1 / 2

Related Entities

ShinyHunters Malware Zero-day Exploit Privilege Escalation CrowdStrike Kandji Apple CWE-269 - Improper Privilege Management T1055 - Process Injection T1068 - Exploitation for Privilege Escalation T1562.001 - Disable Or Modify Tools T1553.001 - Gatekeeper Bypass