Sophos

Latest CVEs · RSS

• CVE-2026-18367 2026-08-06 · CVSS 9.3
  A privilege escalation vulnerability allows local users to execute arbitrary code as root via Sophos Endpoint for macOS older than version 2026.1.1 and Sophos H
• CVE-2025-10159 2025-09-09 · CVSS 9.8
  An authentication bypass vulnerability allows remote attackers to gain administrative privileges on Sophos AP6 Series Wireless Access Points older than firmware
• CVE-2024-13973 2025-07-21 · CVSS 6.8
  A post-auth SQL injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR1 (21.0.1) can potentially lead to administrators achieving ar
• CVE-2024-13974 2025-07-21 · CVSS 8.1
  A business logic vulnerability in the Up2Date component of Sophos Firewall older than version 21.0 MR1 (20.0.1) can lead to attackers controlling the firewall’s
• CVE-2025-7382 2025-07-21 · CVSS 8.8
  A command injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to adjacent attackers achieving pre-auth code ex
• CVE-2025-7624 2025-07-21 · CVSS 9.8
  An SQL injection vulnerability in the legacy (transparent) SMTP proxy of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to remote code execution
• CVE-2025-6704 2025-07-21 · CVSS 9.8
  An arbitrary file writing vulnerability in the Secure PDF eXchange (SPX) feature of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to pre-auth r
• CVE-2025-7433 2025-07-17 · CVSS 8.8
  A local privilege escalation vulnerability in Sophos Intercept X for Windows with Central Device Encryption 2025.1 and older allows arbitrary code execution.
• CVE-2024-13972 2025-07-17 · CVSS 8.8
  A vulnerability related to registry permissions in the Intercept X for Windows updater prior to Core Agent version 2024.3.2 can lead to a local user gaining SYS
• CVE-2025-7472 2025-07-17 · CVSS 7.5
  A local privilege escalation vulnerability in the Intercept X for Windows installer prior version 1.22 can lead to a local user gaining system level privileges,
• CVE-2024-13861 2025-04-11 · CVSS 7.8
  A code injection vulnerability in the Debian package component of Taegis Endpoint Agent (Linux) versions older than 1.3.10 allows local users arbitrary code exe
• CVE-2024-12729 2024-12-19 · CVSS 8.8
  A post-auth code injection vulnerability in the User Portal allows authenticated users to execute code remotely in Sophos Firewall older than version 21.0 MR1 (
• CVE-2024-12728 2024-12-19 · CVSS 9.8
  A weak credentials vulnerability potentially allows privileged system access via SSH to Sophos Firewall older than version 20.0 MR3 (20.0.3).
• CVE-2024-12727 2024-12-19 · CVSS 9.8
  A pre-auth SQL injection vulnerability in the email protection feature of Sophos Firewall versions older than 21.0 MR1 (21.0.1) allows access to the reporting d
• CVE-2024-8885 2024-10-02 · CVSS 8.8
  A local privilege escalation vulnerability in Sophos Intercept X for Windows with Central Device Encryption 2024.2.0 and older allows writing of arbitrary files
• CVE-2021-36806 2023-11-30 · CVSS 4.7
  A reflected XSS vulnerability allows an open redirect when the victim clicks a malicious link to an error page on Sophos Email Appliance older than version
• CVE-2023-5552 2023-10-17 · CVSS 7.1
  A password disclosure vulnerability in the Secure PDF eXchange (SPX) feature allows attackers with full email access to decrypt PDFs in Sophos Firewall version
• CVE-2022-4934 2023-04-04 · CVSS 7.2
  A post-auth command injection vulnerability in the exception wizard of Sophos Web Appliance older than version 4.3.10.4 allows administrators to execute arbitra
• CVE-2020-36692 2023-04-04 · CVSS 6.5
  A reflected XSS via POST vulnerability in report scheduler of Sophos Web Appliance versions older than 4.3.10.4 allows execution of JavaScript code in the victi
• CVE-2023-1671 2023-04-04 · CVSS 9.8
  A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10.4 allows execution of arbitrary code.
• CVE-2022-48309 2023-03-01 · CVSS 4.3
  A CSRF vulnerability allows malicious websites to retrieve logs and technical support archives in Sophos Connect versions older than 2.2.90.
• CVE-2022-4901 2023-03-01 · CVSS 3.3
  Multiple stored XSS vulnerabilities in Sophos Connect versions older than 2.2.90 allow Javascript code to run in the local UI via a malicious VPN configuration
• CVE-2022-48310 2023-03-01 · CVSS 5.5
  An information disclosure vulnerability allows sensitive key material to be included in technical support archives in Sophos Connect versions older than 2.2.90.
• CVE-2022-3709 2022-12-01 · CVSS 6.8
  A stored XSS vulnerability allows admin to super-admin privilege escalation in the Webadmin import group wizard of Sophos Firewall releases older than version 1
• CVE-2022-3226 2022-12-01 · CVSS 7.2
  An OS command injection vulnerability allows admins to execute code via SSL VPN configuration uploads in Sophos Firewall releases older than version 19.5 GA.