macOS Tahoe 26.7.2
macOS 26.7.2 known issues for MDM admins. Is it safe to deploy?
Looking good, earlyDeploy verdict: Looking good, early
Security update (213 fixes per SOFA, none actively exploited) for Macs staying on Tahoe. So far, no widespread Jamf or Intune issues reported as of Oct 28. One niche report: if you used a script or MDM to remove two distrusted roots from /etc/ssl/cert.pem, 26.7.2 restored the original file (tested on a single Mac), so re-run that remediation after updating. Eligible for green review Nov 2, 2026 (7 days after release).
Early verdict. Greenlight doesn't mark a release green until it's 7+ days old. This one is eligible for green review on Nov 2, 2026.
Sources
- Apple: security content of macOS Tahoe 26.7.2
- GitHub issue: 26.7.2 restores /etc/ssl/cert.pem
- The Mac Observer: Sequoia 15.8.2 and Tahoe 26.7.2 released
Checked: Apple security notes, r/Intune and r/macsysadmin (via search), Jamf Nation, Mac Observer.
Last reviewed 2026-10-28.
Release facts
| Version | 26.7.2 |
|---|---|
| Build | 25G332 |
| Release date | Oct 26, 2026 |
| Days since release | 2 |
| Security fixes (CVEs) | 213 |
| Actively exploited CVEs fixed | 0 |
Timing and deferral
- SOFA expiration date: Jan 26, 2027 (in 90 days). This is the
ExpirationDateSOFA reports for this build, taken from Apple's update metadata. Treat it as the date Apple may stop offering this build. It isn't an Apple-announced signing deadline. - Deferral windows (calculated from the release date):
- 30-day deferral ends Nov 25, 2026 (28 days left)
- 60-day deferral ends Dec 25, 2026 (58 days left)
- 90-day deferral ends Jan 24, 2027 (88 days left)
- Shipped 28 days after the previous macOS 26 release.
Jamf Pro + Intune notes
Jamf Pro
- If you pushed a script to remove the AAA Certificate Services and emSign ECC Root CA - G3 roots from /etc/ssl/cert.pem, run it again after the update (single-Mac report). (source)
Microsoft Intune
No product-specific reports collected yet. Know of one? Email us with a link.