CVE-2026-11626 is a local privilege escalation vulnerability in the Broadcom Symantec Endpoint Protection CleanWipe Removal Tool for macOS versions prior to 16.0.0.65. The issue is classified under CWE-250, which involves execution with unnecessary privileges. An attacker with limited privileges on the affected system may exploit this vulnerability to gain administrative control. The CVSS 4.0 vector indicates the attack requires local access, low attack complexity, partial privileges, and user interaction, with high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available.

An attacker with limited local privileges can escalate to administrative privileges, potentially gaining full control over the affected system. This could lead to unauthorized system modifications, data compromise, or disruption of services. The vulnerability affects confidentiality, integrity, and availability at a high level according to the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit local user privileges and monitor for suspicious activity related to the CleanWipe Removal Tool. Avoid running the tool on untrusted systems or by untrusted users.