Login Request a demo
SO
Vendor
Sophos
71 products with CVEs on record
244
CVEs
10
On KEV
0
New 30D
Products
FI
Firewall
Network Security
9.8
14 CVEs3 on KEV0 new
WA
Web Appliance
Sophos
9.8
17 CVEs1 on KEV0 new
XF
XG Firewall Firmware
Sophos
9.8
9 CVEs1 on KEV0 new
UT
Unified Threat Management
Sophos
9.8
6 CVEs1 on KEV0 new
CY
CyberoamOS
Sophos
9.8
2 CVEs1 on KEV0 new
SU
SG UTM
Sophos
9.8
1 CVEs1 on KEV0 new
SW
Sophos Web Appliance
Sophos
9.8
1 CVEs1 on KEV0 new
XF
XG Firewall
Sophos
9.8
1 CVEs1 on KEV0 new
SA
Sophos Anti-virus
Sophos
–
35 CVEs0 on KEV0 new
AN
Anti-virus
Sophos
–
12 CVEs0 on KEV0 new
FF
Firewall Firmware
Sophos
9.8
10 CVEs0 on KEV0 new
SP
Sophos Puremessage Anti-virus
Sophos
–
9 CVEs0 on KEV0 new
UT
Unified Threat Management Software
Sophos
8.1
9 CVEs0 on KEV0 new
SE
Safeguard Easy Device Encryption Client
Sophos
7.8
8 CVEs0 on KEV0 new
SS
Sophos Small Business Suite
Sophos
–
8 CVEs0 on KEV0 new
SE
Safeguard Enterprise Client
Sophos
7.8
7 CVEs0 on KEV0 new
SL
Safeguard Lan Crypt Client
Sophos
7.8
7 CVEs0 on KEV0 new
WA
Web Appliance Firmware
Sophos
–
6 CVEs0 on KEV0 new
CO
Connect
Sophos
8.8
4 CVEs0 on KEV0 new
HI
Hitmanpro
Sophos
7.8
4 CVEs0 on KEV0 new
HI
Hitmanpro.alert
Sophos
7.8
4 CVEs0 on KEV0 new
SE
Scanning Engine
Sophos
–
4 CVEs0 on KEV0 new
EP
Endpoint Protection
Sophos
7.8
3 CVEs0 on KEV0 new
ES
Endpoint Security
Sophos
–
3 CVEs0 on KEV0 new
PF
Puremessage For Microsoft Exchange
Sophos
–
3 CVEs0 on KEV0 new
SB
Small Business Suite
Sophos
–
3 CVEs0 on KEV0 new
AN
Anti-virus7.6.3
Sophos
–
2 CVEs0 on KEV0 new
ES
Es1000
Sophos
–
2 CVEs0 on KEV0 new
ES
Es4000
Sophos
–
2 CVEs0 on KEV0 new
IX
Intercept X
Sophos
6.7
2 CVEs0 on KEV0 new
IX
Intercept X Endpoint
Sophos
7.8
2 CVEs0 on KEV0 new
IX
Intercept X For Server
Sophos
7.8
2 CVEs0 on KEV0 new
MO
Mobile
Sophos
9.8
2 CVEs0 on KEV0 new
ST
Sophos Tester
Sophos
7.8
2 CVEs0 on KEV0 new
UT
Unified Threat Management Up2date
Sophos
8.8
2 CVEs0 on KEV0 new
AF
Anti-virus For Sophos Central
Sophos
8.8
1 CVEs0 on KEV0 new
AF
Anti-virus For Sophos Home
Sophos
8.8
1 CVEs0 on KEV0 new
AS
Astaro Security Gateway Firmware
Sophos
9.8
1 CVEs0 on KEV0 new
AS
Astaro Security Linux
Sophos
–
1 CVEs0 on KEV0 new
AU
Authenticator
Sophos
3.9
1 CVEs0 on KEV0 new
CO
Cloud Optix
Sophos
7.8
1 CVEs0 on KEV0 new
CC
Cyberoam Cr100ing Utm Firmware
Sophos
6.1
1 CVEs0 on KEV0 new
CC
Cyberoam Cr25ing Utm Firmware
Sophos
8.8
1 CVEs0 on KEV0 new
CC
Cyberoam Cr35ing Utm Firmware
Sophos
6.1
1 CVEs0 on KEV0 new
CF
Cyberoam Firmware
Sophos
6.1
1 CVEs0 on KEV0 new
DE
Disk Encryption
Sophos
–
1 CVEs0 on KEV0 new
EA
Email Appliance
Sophos
6.1
1 CVEs0 on KEV0 new
EC
Enterprise Console
Sophos
6.8
1 CVEs0 on KEV0 new
EP
Exploit Prevention
Sophos
4.4
1 CVEs0 on KEV0 new
FE
Free Encryption
Sophos
–
1 CVEs0 on KEV0 new
HO
Home
Sophos
6.7
1 CVEs0 on KEV0 new
ID
Invincea Dell Protected Workspace
Sophos
7.8
1 CVEs0 on KEV0 new
IN
Invincea-x
Sophos
7.8
1 CVEs0 on KEV0 new
IC
Ipsec Client
Sophos
8.1
1 CVEs0 on KEV0 new
IV
Iview
Sophos
6.1
1 CVEs0 on KEV0 new
MC
Mobile Control Eas Proxy
Sophos
8.6
1 CVEs0 on KEV0 new
PU
Puremessage
Sophos
6.1
1 CVEs0 on KEV0 new
SE
Safeguard Enterprise
Sophos
–
1 CVEs0 on KEV0 new
SE
Safeguard Enterprise Device Encryption
Sophos
–
1 CVEs0 on KEV0 new
SP
Safeguard Privatecrypto
Sophos
–
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-18367
SE
Sophos Endpoint for macOS
Sophos
9.3
0%
Aug 6A privilege escalation vulnerability allows local users to execute arbitrary code as root via Sophos Endpoint for macOS older than version 2026.1.1 and Sophos Home for macOS older…
CVE-2025-7624
FF
Firewall Firmware
Sophos
9.8
11%
Jul 21An SQL injection vulnerability in the legacy (transparent) SMTP proxy of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to remote code execution, if a quarantining…
CVE-2025-7382
FF
Firewall Firmware
Sophos
8.8
5%
Jul 21A command injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to adjacent attackers achieving pre-auth code execution on High…
CVE-2025-6704
FF
Firewall Firmware
Sophos
9.8
12%
Jul 21An arbitrary file writing vulnerability in the Secure PDF eXchange (SPX) feature of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to pre-auth remote code…
CVE-2024-13974
FF
Firewall Firmware
Sophos
8.1
9%
Jul 21A business logic vulnerability in the Up2Date component of Sophos Firewall older than version 21.0 MR1 (20.0.1) can lead to attackers controlling the firewall’s DNS environment to…
CVE-2024-13973
FF
Firewall Firmware
Sophos
7.2
12%
Jul 21A post-auth SQL injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR1 (21.0.1) can potentially lead to administrators achieving arbitrary code…
CVE-2024-13861
TE
Taegis Endpoint Agent
Sophos
7.8
0%
Apr 11A code injection vulnerability in the Debian package component of Taegis Endpoint Agent (Linux) versions older than 1.3.10 allows local users arbitrary code execution as root
CVE-2024-12729
FI
Firewall
Sophos
8.8
1%
Dec 19A post-auth code injection vulnerability in the User Portal allows authenticated users to execute code remotely in Sophos Firewall older than version 21.0 MR1 (21.0.1)
CVE-2024-12728
FI
Firewall
Sophos
9.8
1%
Dec 19A weak credentials vulnerability potentially allows privileged system access via SSH to Sophos Firewall older than version 20.0 MR3 (20.0.3)
CVE-2024-12727
FI
Firewall
Sophos
9.8
1%
Dec 19A pre-auth SQL injection vulnerability in the email protection feature of Sophos Firewall versions older than 21.0 MR1 (21.0.1) allows access to the reporting database and can…
CVE-2021-36806
EA
Email Appliance
Sophos
6.1
0%
Nov 30A reflected XSS vulnerability allows an open redirect when the victim clicks a malicious link to an error page on Sophos Email Appliance older than version 4.5.3.4
CVE-2023-5552
FI
Firewall
Sophos
7.5
1%
Oct 18A password disclosure vulnerability in the Secure PDF eXchange (SPX) feature allows attackers with full email access to decrypt PDFs in Sophos Firewall version 19.5 MR3 (19.5.3)…
CVE-2023-33335
IV
Iview
Sophos
6.1
1%
Jul 5Cross Site Scripting (XSS) in Sophos Sophos iView (The EOL was December 31st 2020) in grpname parameter that allows arbitrary script to be executed
CVE-2023-33336
WA
Web Appliance
Sophos
4.8
1%
Jun 30Reflected cross site scripting (XSS) vulnerability was discovered in Sophos Web Appliance v4.3.9.1 that allows for arbitrary code to be inputted via the double quotes
CVE-2022-4934
WA
Web Appliance
Sophos
7.2
2%
Apr 4A post-auth command injection vulnerability in the exception wizard of Sophos Web Appliance older than version 4.3.10.4 allows administrators to execute arbitrary code
CVE-2020-36692
WA
Web Appliance
Sophos
5.4
1%
Apr 4A reflected XSS via POST vulnerability in report scheduler of Sophos Web Appliance versions older than 4.3.10.4 allows execution of JavaScript code in the victim browser via a…
CVE-2023-1671
In wildKEV
SW
Sophos Web Appliance
Sophos
9.8
100%
Apr 4Sophos Web Appliance Command Injection Vulnerability
CVE-2022-4901
CO
Connect
Sophos
6.1
0%
Mar 1Multiple stored XSS vulnerabilities in Sophos Connect versions older than 2.2.90 allow Javascript code to run in the local UI via a malicious VPN configuration that must be…
CVE-2022-48310
CO
Connect
Sophos
5.5
0%
Mar 1An information disclosure vulnerability allows sensitive key material to be included in technical support archives in Sophos Connect versions older than 2.2.90
CVE-2022-48309
CO
Connect
Sophos
4.3
0%
Mar 1A CSRF vulnerability allows malicious websites to retrieve logs and technical support archives in Sophos Connect versions older than 2.2.90
CVE-2022-3713
XF
XG Firewall Firmware
Sophos
8.8
1%
Dec 1A code injection vulnerability allows adjacent attackers to execute code in the Wifi controller of Sophos Firewall releases older than version 19.5 GA
CVE-2022-3711
XF
XG Firewall Firmware
Sophos
4.3
1%
Dec 1A post-auth read-only SQL injection vulnerability allows users to read non-sensitive configuration database contents in the User Portal of Sophos Firewall releases older than…
CVE-2022-3710
XF
XG Firewall Firmware
Sophos
2.7
1%
Dec 1A post-auth read-only SQL injection vulnerability allows API clients to read non-sensitive configuration database contents in the API controller of Sophos Firewall releases older…
CVE-2022-3709
XF
XG Firewall Firmware
Sophos
8.4
1%
Dec 1A stored XSS vulnerability allows admin to super-admin privilege escalation in the Webadmin import group wizard of Sophos Firewall releases older than version 19.5 GA
CVE-2022-3696
XF
XG Firewall Firmware
Sophos
7.2
1%
Dec 1A post-auth code injection vulnerability allows admins to execute code in Webadmin of Sophos Firewall releases older than version 19.5 GA
CVE-2022-3226
XF
XG Firewall Firmware
Sophos
7.2
2%
Dec 1An OS command injection vulnerability allows admins to execute code via SSL VPN configuration uploads in Sophos Firewall releases older than version 19.5 GA
CVE-2022-3980
MO
Mobile
Sophos
9.8
10%
Nov 16An XML External Entity (XEE) vulnerability allows server-side request forgery (SSRF) and potential code execution in Sophos Mobile managed on-premises between versions 5.0.0 and…
CVE-2022-3236
In wildKEV
FI
Firewall
Sophos
9.8
99%
Sep 23Sophos Firewall Code Injection Vulnerability
CVE-2022-1807
FI
Firewall
Sophos
7.2
1%
Sep 7Multiple SQLi vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall older than version 18.5 MR4 and version 19.0 MR1
CVE-2021-25268
FF
Firewall Firmware
Sophos
8.4
1%
May 5Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from MySophos admin to SFOS admin in Sophos Firewall older than version 19.0 GA
CVE-2021-25267
FF
Firewall Firmware
Sophos
8.4
1%
May 5Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall older than version 19.0 GA
CVE-2021-25266
AU
Authenticator
Sophos
3.9
0%
Apr 27An insecure data storage vulnerability allows a physical attacker with root privileges to retrieve TOTP secret keys from unlocked phones in Sophos Authenticator for Android…
CVE-2022-0331
FI
Firewall
Sophos
5.3
2%
Mar 29An information disclosure vulnerability in Webadmin allows an unauthenticated remote attacker to read the device serial number in Sophos Firewall version v18.5 MR2 and older
CVE-2022-1040
In wildKEV
FI
Firewall
Sophos
9.8
100%
Mar 25Sophos Firewall Authentication Bypass Vulnerability
CVE-2022-0652
UT
Unified Threat Management
Sophos
7.8
0%
Mar 22Confd log files contain local users', including root’s, SHA512crypt password hashes with insecure access permissions
CVE-2022-0386
UT
Unified Threat Management
Sophos
8.8
1%
Mar 22A post-auth SQL injection vulnerability in the Mail Manager potentially allows an authenticated attacker to execute code in Sophos UTM before version 9.710
CVE-2021-36809
SV
Ssl Vpn Client
Sophos
6.0
0%
Mar 8A local attacker can overwrite arbitrary files on the system with VPN client logs using administrator privileges, potentially resulting in a denial of service and data loss, in…
CVE-2021-36807
UT
Unified Threat Management Up2date
Sophos
8.8
1%
Nov 26An authenticated user could potentially execute code via an SQLi vulnerability in the user portal of SG UTM before version 9.708 MR8
CVE-2021-25269
IX
Intercept X For Server
Sophos
4.4
0%
Nov 26A local administrator could prevent the HMPA service from starting despite tamper protection using an unquoted service path vulnerability in the HMPA component of Sophos Intercept…
CVE-2021-36808
SS
Sophos Secure Workspace
Sophos
7.0
0%
Oct 30A local attacker could bypass the app password using a race condition in Sophos Secure Workspace for Android before version 9.7.3115
CVE-2021-25271
HI
Hitmanpro
Sophos
6.0
0%
Oct 8A local attacker could read or write arbitrary files with administrator privileges in HitmanPro before version Build 318
CVE-2021-25270
HI
Hitmanpro.alert
Sophos
6.7
0%
Oct 8A local attacker could execute arbitrary code with administrator privileges in HitmanPro.Alert before version Build 901
CVE-2021-25273
UT
Unified Threat Management
Sophos
4.8
1%
Jul 29Stored XSS can execute as administrator in quarantined email detail view in Sophos UTM before version 9.706
CVE-2021-25264
HO
Home
Sophos
6.7
0%
May 17In multiple versions of Sophos Endpoint products for MacOS, a local attacker could execute arbitrary code with administrator privileges
CVE-2021-25265
CO
Connect
Sophos
8.8
2%
Mar 22A malicious website could execute code remotely in Sophos Connect Client before version 2.1
CVE-2020-29574
RansomwareIn wildKEV
CY
Cyberoamos
Sophos
9.8
5%
Dec 11CyberoamOS (CROS) SQL Injection Vulnerability
CVE-2020-25223
In wildKEV
UT
Unified Threat Management
Sophos
9.8
97%
Sep 25Sophos SG UTM Remote Code Execution Vulnerability
CVE-2020-17352
XF
XG Firewall Firmware
Sophos
8.8
4%
Aug 7Two OS command injection vulnerabilities in the User Portal of Sophos XG Firewall through 2020-08-05 potentially allow an authenticated attacker to remotely execute arbitrary code
CVE-2020-15504
XF
XG Firewall Firmware
Sophos
9.8
2%
Jul 10A SQL injection vulnerability in the user and admin web interfaces of Sophos XG Firewall v18.0 MR1 and older potentially allows an attacker to run arbitrary code remotely
CVE-2020-15069
In wildKEV
XF
XG Firewall Firmware
Sophos
9.8
11%
Jun 29Sophos XG Firewall Buffer Overflow Vulnerability
CVE-2020-14980
SS
Sophos Secure Email
Sophos
5.9
1%
Jun 22The Sophos Secure Email application through 3.9.4 for Android has Missing SSL Certificate Validation
CVE-2020-11503
FI
Firewall
Sophos
9.8
1%
Jun 18A heap-based buffer overflow in the awarrensmtp component of Sophos XG Firewall v17.5 MR11 and older potentially allows an attacker to run arbitrary code remotely
CVE-2020-12271
RansomwareIn wildKEV
FI
Firewall
Sophos
9.8
42%
Apr 27Sophos SFOS SQL Injection Vulnerability
CVE-2020-10947
AF
Anti-virus For Sophos Home
Sophos
8.8
2%
Apr 17Mac Endpoint for Sophos Central before 9.9.6 and Mac Endpoint for Sophos Home before 2.2.6 allow Privilege Escalation
CVE-2020-9540
HI
Hitmanpro.alert
Sophos
7.8
0%
Mar 2Sophos HitmanPro.Alert before build 861 allows local elevation of privilege
CVE-2020-9363
MO
Mobile
Sophos
7.8
1%
Feb 24The Sophos AV parsing engine before 2020-01-14 allows virus-detection bypass via a crafted ZIP archive
CVE-2019-17059
CY
Cyberoamos
Sophos
9.8
7%
Oct 11A shell injection vulnerability on the Sophos Cyberoam firewall appliance with CyberoamOS before 10.6.6 MR-6 allows remote attackers to execute arbitrary commands via the Web…
CVE-2018-16118
FI
Firewall
Sophos
8.1
4%
Jun 20A shell escape vulnerability in /webconsole/APIController in the API Configuration component of Sophos XG firewall 17.0.8 MR-8 allows remote attackers to execute arbitrary OS…
CVE-2018-16117
FI
Firewall
Sophos
8.8
44%
Jun 20A shell escape vulnerability in /webconsole/Controller in Admin Portal of Sophos XG firewall 17.0.8 MR-8 allow remote authenticated attackers to execute arbitrary OS commands via…
CVE-2018-16116
FI
Firewall
Sophos
8.8
2%
Jun 20SQL injection vulnerability in AccountStatus.jsp in Admin Portal of Sophos XG firewall 17.0.8 MR-8 allow remote authenticated attackers to execute arbitrary SQL commands via the…