Sophos vulnerabilities

Products

• Anti-virus 35
• Firewall 21
• Web Appliance 17
• Anti-virus 12
• Firewall Firmware 10
• Puremessage Anti-virus 9
• Unified Threat Management Software 9
• Xg Firewall Firmware 9
• Safeguard Easy Device Encryption Client 8
• Sfos 8
• Small Business Suite 8
• Safeguard Enterprise Client 7
• Safeguard Lan Crypt Client 7
• Unified Threat Management 6
• Web Appliance Firmware 6
• Connect 4
• Firewall 4
• Hitmanpro 4
• Hitmanpro.alert 4
• Scanning Engine 4
• Connect Client 4
• Endpoint Protection 3
• Endpoint Security 3
• Intercept X 3
• Puremessage For Microsoft Exchange 3
• Sg Utm 3
• Small Business Suite 3
• Utm 3
• Web Appliance 3
• Ssl Vpn Client 3
• Anti-virus7.6.3 2
• Cyberoamos 2
• Es1000 2
• Es4000 2
• Intercept X Endpoint 2
• Intercept X For Server 2
• Mobile 2
• Home For Macos 2
• Intercept X For Windows 2
• Tester 2
• Unified Threat Management Up2date 2

Newest

• sophos sg utm A path traversal vulnerability allows a remote unauthenticated attacker to execute arbitrary code... CVE-2026-118633 9.2 CriticalOctober 28, 2026
• sophos endpoint for macos, home for macos +1 more A privilege escalation vulnerability allows local users to execute arbitrary code as root via... CVE-2026-18367 9.3 CriticalAugust 6, 2026
• sophos ap6 series wireless access points An authentication bypass vulnerability allows remote attackers to gain administrative privileges... CVE-2025-10159 9.8 CriticalSeptember 9, 2025
• sophos firewall, firewall firmware +1 more A post-auth SQL injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0... CVE-2024-13973 EPSS 12.3% 6.8 MediumJuly 21, 2025
• sophos firewall, firewall firmware +1 more A business logic vulnerability in the Up2Date component of Sophos Firewall older than version 21... CVE-2024-13974 8.1 HighJuly 21, 2025
• sophos firewall, firewall firmware +1 more A command injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR2 (21... CVE-2025-7382 8.8 HighJuly 21, 2025
• sophos firewall, firewall firmware +1 more An SQL injection vulnerability in the legacy (transparent) SMTP proxy of Sophos Firewall versions... CVE-2025-7624 EPSS 10.5% 9.8 CriticalJuly 21, 2025
• sophos firewall, firewall firmware +1 more An arbitrary file writing vulnerability in the Secure PDF eXchange (SPX) feature of Sophos... CVE-2025-6704 EPSS 11.8% 9.8 CriticalJuly 21, 2025
• sophos intercept x for windows A local privilege escalation vulnerability in Sophos Intercept X for Windows with Central Device... CVE-2025-7433 8.8 HighJuly 17, 2025
• sophos intercept x for windows, intercept x for windows core agent +1 more A vulnerability related to registry permissions in the Intercept X for Windows updater prior to... CVE-2024-13972 8.8 HighJuly 17, 2025
• sophos intercept x for windows installer A local privilege escalation vulnerability in the Intercept X for Windows installer prior version... CVE-2025-7472 7.5 HighJuly 17, 2025
• sophos taegis endpoint agent (linux), taegis endpoint agent +1 more A code injection vulnerability in the Debian package component of Taegis Endpoint Agent (Linux)... CVE-2024-13861 7.8 HighApril 11, 2025
• sophos firewall, firewall firmware +1 more A post-auth SQLi vulnerability in the User Portal allows authenticated users to execute code... CVE-2024-12729 8.8 HighDecember 19, 2024
• sophos firewall, firewall firmware +1 more A weak credentials vulnerability potentially allows privileged system access via SSH to Sophos... CVE-2024-12728 9.8 CriticalDecember 19, 2024
• sophos firewall, firewall firmware +1 more A pre-auth SQL injection vulnerability in the email protection feature of Sophos Firewall... CVE-2024-12727 9.8 CriticalDecember 19, 2024
• sophos intercept x A local privilege escalation vulnerability in Sophos Intercept X for Windows with Central Device... CVE-2024-8885 8.8 HighOctober 2, 2024
• sophos email appliance A reflected XSS vulnerability allows an open redirect when the victim clicks a malicious link to... CVE-2021-36806 4.7 MediumNovember 30, 2023
• sophos firewall A password disclosure vulnerability in the Secure PDF eXchange (SPX) feature allows attackers... CVE-2023-5552 7.1 HighOctober 17, 2023
• sophos iview Cross Site Scripting (XSS) in Sophos Sophos iView (The EOL was December 31st 2020) in grpname... CVE-2023-33335 6.1 MediumJuly 5, 2023
• sophos web appliance Reflected cross site scripting (XSS) vulnerability was discovered in Sophos Web Appliance v4.3.9... CVE-2023-33336 4.8 MediumJune 30, 2023
• sophos web appliance A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance... CVE-2023-1671 In KEVPublic exploit EPSS 100.0% 9.8 CriticalApril 4, 2023
• sophos web appliance A post-auth command injection vulnerability in the exception wizard of Sophos Web Appliance older... CVE-2022-4934 7.2 HighApril 4, 2023
• sophos web appliance A reflected XSS via POST vulnerability in report scheduler of Sophos Web Appliance versions older... CVE-2020-36692 6.5 MediumApril 4, 2023
• sophos connect, connect client +1 more Multiple stored XSS vulnerabilities in Sophos Connect versions older than 2.2.90 allow Javascript... CVE-2022-4901 3.3 LowMarch 1, 2023
• sophos connect, connect client +1 more An information disclosure vulnerability allows sensitive key material to be included in technical... CVE-2022-48310 5.5 MediumMarch 1, 2023
• sophos connect, connect client +1 more A CSRF vulnerability allows malicious websites to retrieve logs and technical support archives in... CVE-2022-48309 4.3 MediumMarch 1, 2023
• sophos firewall, xg firewall firmware +1 more A code injection vulnerability allows adjacent attackers to execute code in the Wifi controller... CVE-2022-3713 8.8 HighDecember 1, 2022
• sophos firewall, xg firewall firmware +1 more A post-auth read-only SQL injection vulnerability allows users to read non-sensitive... CVE-2022-3711 4.3 MediumDecember 1, 2022
• sophos firewall, xg firewall firmware +1 more A post-auth read-only SQL injection vulnerability allows API clients to read non-sensitive... CVE-2022-3710 2.7 LowDecember 1, 2022
• sophos firewall, xg firewall firmware +1 more A stored XSS vulnerability allows admin to super-admin privilege escalation in the Webadmin... CVE-2022-3709 6.8 MediumDecember 1, 2022
• sophos firewall, xg firewall firmware +1 more A post-auth code injection vulnerability allows admins to execute code in Webadmin of Sophos... CVE-2022-3696 7.2 HighDecember 1, 2022
• sophos firewall, xg firewall firmware +1 more An OS command injection vulnerability allows admins to execute code via SSL VPN configuration... CVE-2022-3226 7.2 HighDecember 1, 2022
• sophos mobile, mobile managed on-premises +1 more An XML External Entity (XEE) vulnerability allows server-side request forgery (SSRF) and... CVE-2022-3980 9.8 CriticalNovember 16, 2022
• sophos firewall A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to... CVE-2022-3236 In KEV EPSS 98.9% 9.8 CriticalSeptember 23, 2022
• sophos firewall Multiple SQLi vulnerabilities in Webadmin allow for privilege escalation from admin to super... CVE-2022-1807 7.2 HighSeptember 7, 2022
• sophos firewall, firewall firmware +1 more Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from MySophos admin to... CVE-2021-25268 8.4 HighMay 5, 2022
• sophos firewall, firewall firmware +1 more Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin... CVE-2021-25267 6.8 MediumMay 5, 2022
• sophos authenticator, intercept x for mobile (android), intercept x +1 more +3 more An insecure data storage vulnerability allows a physical attacker with root privileges to... CVE-2021-25266 3.9 LowApril 27, 2022
• sophos firewall, sfos +1 more An information disclosure vulnerability in Webadmin allows an unauthenticated remote attacker to... CVE-2022-0331 5.3 MediumMarch 29, 2022
• sophos firewall, sfos +1 more An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker... CVE-2022-1040 In KEVPublic exploit EPSS 99.8% 9.8 CriticalMarch 25, 2022
• sophos utm, unified threat management +1 more Confd log files contain local users', including root’s, SHA512crypt password hashes with... CVE-2022-0652 3.3 LowMarch 21, 2022
• sophos utm, unified threat management +1 more A post-auth SQL injection vulnerability in the Mail Manager potentially allows an authenticated... CVE-2022-0386 8.8 HighMarch 21, 2022
• sophos ssl vpn client A local attacker can overwrite arbitrary files on the system with VPN client logs using... CVE-2021-36809 6.1 MediumMarch 7, 2022
• sophos sg utm, unified threat management up2date +1 more An authenticated user could potentially execute code via an SQLi vulnerability in the user portal... CVE-2021-36807 8.8 HighNovember 26, 2021
• sophos exploit prevention, intercept x advanced, intercept x advanced for server +2 more +4 more A local administrator could prevent the HMPA service from starting despite tamper protection... CVE-2021-25269 4.4 MediumNovember 26, 2021
• sophos secure workspace for android, secure workspace +1 more A local attacker could bypass the app password using a race condition in Sophos Secure Workspace... CVE-2021-36808 Public exploit 5.9 MediumOctober 30, 2021
• sophos hitmanpro A local attacker could read or write arbitrary files with administrator privileges in HitmanPro... CVE-2021-25271 6.0 MediumOctober 7, 2021
• sophos hitmanpro.alert A local attacker could execute arbitrary code with administrator privileges in HitmanPro.Alert... CVE-2021-25270 6.7 MediumOctober 7, 2021
• sophos utm, unified threat management +1 more Stored XSS can execute as administrator in quarantined email detail view in Sophos UTM before... CVE-2021-25273 4.8 MediumJuly 29, 2021
• sophos home, intercept x for macos, intercept x for macos (opm) +2 more +4 more In multiple versions of Sophos Endpoint products for MacOS, a local attacker could execute... CVE-2021-25264 6.7 MediumMay 17, 2021
• Show olderLoading…