CVE-2026-39118 - Vulnerability Details

Threat entity extracted from intelligence sources

Frequency
8
occurrences
First Seen
June 24, 2026
Last Seen
June 25, 2026

CVE-2026-39118 is a vulnerability tracked by ThreatCluster, appearing in 1 threat cluster built from 8 intelligence report mentions.

CVE-2026-39118 is a vulnerability tracked across 1 threat cluster and 8 intelligence report mentions on ThreatCluster. First observed June 24, 2026; most recent activity June 25, 2026.

Related Threat Clusters

Recent Intelligence Reports

  • macOS Flaw Lets Standard Users Disable EDR and MDM — Infosecurity-Magazine · June 25, 2026
  • Mallory.ai Technical Analysis — www.mallory.ai · June 25, 2026
  • SentinelOne Vulnerability Database: CVE-2026-39118 — www.sentinelone.com · June 25, 2026
  • Critical CVE-2026-39118 Vulnerability in macOS Allows Users to Disable Kandji MDM ... — Rescana · June 25, 2026
  • macOS attack technique bypasses endpoint security tools — Feeds.Feedburner · June 24, 2026
  • New macOS security flaw could let hackers disable protection tools, researchers say — Appleinsider · June 24, 2026
  • Agent 4 7 5 5374 — www.iru.com · June 24, 2026
  • Apple's MacOS Gap Lets Users Disable Security Tools — Darkreading · June 24, 2026

Related Entities

ShinyHunters Malware Privilege Escalation Zero-day Exploit Apple CrowdStrike Kandji CWE-269 - Improper Privilege Management T1036 - Masquerading T1055 - Process Injection T1068 - Exploitation for Privilege Escalation T1553.001 - Gatekeeper Bypass

Frequently asked questions

What is CVE-2026-39118?

CVE-2026-39118 is a vulnerability tracked by ThreatCluster, appearing in 1 threat cluster built from 8 intelligence report mentions.

Is CVE-2026-39118 still active?

The most recent intelligence report mentioning CVE-2026-39118 on ThreatCluster is dated June 25, 2026. Activity was first observed June 24, 2026, giving a tracked span from then to June 25, 2026.

What is CVE-2026-39118 associated with?

Across ThreatCluster reporting, CVE-2026-39118 most frequently co-occurs with ShinyHunters, Malware, Privilege Escalation, Zero-day Exploit, Apple, among 12 tracked related entities.

What are the latest developments involving CVE-2026-39118?

The most significant recent cluster is “New macOS Flaw Allows Users to Disable Security Tools Without Admin Rights” (12 articles · Updated June 24, 2026). CVE-2026-39118 appears across 1 threat cluster in total, listed above with sources.

How much reporting does ThreatCluster have on CVE-2026-39118?

CVE-2026-39118 appears in 8 intelligence report mentions across 1 deduplicated threat cluster, aggregated from 17,000+ monitored sources.

CVSS v3.1 Breakdown