netVigilance Vulnerability intelligence since 2004

Sophos

7 Sophos vulnerabilities with confirmed exploitation in the wild, as published by CISA; 7 past the federal remediation deadline. This is a static slice of the catalog — open the full catalog for search and filters.

Known exploited vulnerabilities for Sophos
Vulnerability Status
overdue 560d2025-02-27 CVE-2020-29574 Sophos / CyberoamOS CyberoamOS (CROS) SQL Injection Vulnerability 2025-02-06 9.8 past dueransomware
overdue 560d2025-02-27 CVE-2020-15069 Sophos / XG Firewall Sophos XG Firewall Buffer Overflow Vulnerability 2025-02-06 9.8 past due
overdue 1008d2023-12-07 CVE-2023-1671 Sophos / Web Appliance Sophos Web Appliance Command Injection Vulnerability 2023-11-16 9.8 past due
overdue 1427d2022-10-14 CVE-2022-3236 Sophos / Firewall Sophos Firewall Code Injection Vulnerability 2022-09-23 9.8 past due
overdue 1603d2022-04-21 CVE-2022-1040 Sophos / Firewall Sophos Firewall Authentication Bypass Vulnerability 2022-03-31 9.8 past due
overdue 1609d2022-04-15 CVE-2020-25223 Sophos / SG UTM Sophos SG UTM Remote Code Execution Vulnerability 2022-03-25 9.8 past due
overdue 1591d2022-05-03 CVE-2020-12271 Sophos / SFOS Sophos SFOS SQL Injection Vulnerability 2021-11-03 9.8 past dueransomware