Skip to content
THREATWIRE

CVE Tracker · Vendor

Sophos CVEs

7 CVEs in the tracker, 7 in the CISA KEV catalogue.

All vendors · RSS feed for Sophos · Tracker data last updated 18 Oct 2026.

Showing 7 of 7

  1. CVE-2023-1671CVSS 9.8 criticalEPSS 100%KEV2023-04-04

    Web Appliance. Sophos Web Appliance Command Injection Vulnerability

  2. CVE-2022-3236CVSS 9.8 criticalEPSS 98.9%KEV2022-09-23

    Firewall. Sophos Firewall Code Injection Vulnerability

  3. CVE-2022-1040CVSS 9.8 criticalEPSS 100%KEV2022-03-25

    Firewall. Sophos Firewall Authentication Bypass Vulnerability

  4. CVE-2020-29574No CVSSEPSS 4.70%KEV

    CyberoamOS. CyberoamOS (CROS) SQL Injection Vulnerability

  5. CVE-2020-25223No CVSSEPSS 96.8%KEV

    SG UTM. Sophos SG UTM Remote Code Execution Vulnerability

  6. CVE-2020-15069No CVSSEPSS 10.7%KEV

    XG Firewall. Sophos XG Firewall Buffer Overflow Vulnerability

  7. CVE-2020-12271No CVSSEPSS 42.4%KEV

    SFOS. Sophos SFOS SQL Injection Vulnerability