Complete feed
Action required
Critical/high still unreviewed, or CISA KEV listed
Android app · Google Play
Take your CVE monitoring with you.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
High [CVE-2025-7382] command injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can
A command injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to adjacent attackers achieving pre-auth code execution on High Availability (HA) auxiliary devices, if OTP authentication for the admin user is enabled.
High [CVE-2024-13974] business logic vulnerability in the Up2Date component of Sophos Firewall older than version 21.0 MR1 (20.0.1) can
A business logic vulnerability in the Up2Date component of Sophos Firewall older than version 21.0 MR1 (20.0.1) can lead to attackers controlling the firewall’s DNS environment to achieve remote code execution.
High [CVE-2025-7433] local privilege escalation vulnerability in Sophos Intercept X for Windows with Central Device Encryption 2025.1 and older
A local privilege escalation vulnerability in Sophos Intercept X for Windows with Central Device Encryption 2025.1 and older allows arbitrary code execution.
High [CVE-2025-7472] local privilege escalation vulnerability in the Intercept X for Windows installer prior version 1.22 can
A local privilege escalation vulnerability in the Intercept X for Windows installer prior version 1.22 can lead to a local user gaining system level privileges, if the installer is run as SYSTEM.
High [CVE-2024-13972] vulnerability related to registry permissions in the Intercept X for Windows updater prior to Core Agent version 2024.3.2 can
A vulnerability related to registry permissions in the Intercept X for Windows updater prior to Core Agent version 2024.3.2 can lead to a local user gaining SYSTEM level privileges during a product upgrade.
High [CVE-2024-13861] code injection vulnerability in the Debian package component of Taegis Endpoint Agent (Linux) versions older than 1.3.10
A code injection vulnerability in the Debian package component of Taegis Endpoint Agent (Linux) versions older than 1.3.10 allows local users arbitrary code execution as root. Redhat-based systems using RPM packages are not affected.
High [CVE-2024-12729] Sophos Firewall: post-auth code injection vulnerability in the User Portal
A post-auth code injection vulnerability in the User Portal allows authenticated users to execute code remotely in Sophos Firewall older than version 21.0 MR1 (21.0.1).
High [CVE-2024-8885] local privilege escalation vulnerability in Sophos Intercept X for Windows with Central Device Encryption 2024.2.0 and older
A local privilege escalation vulnerability in Sophos Intercept X for Windows with Central Device Encryption 2024.2.0 and older allows writing of arbitrary files.
High [CVE-2023-5552] Sophos Firewall: password disclosure vulnerability in the Secure PDF eXchange (SPX) feature
A password disclosure vulnerability in the Secure PDF eXchange (SPX) feature allows attackers with full email access to decrypt PDFs in Sophos Firewall version 19.5 MR3 (19.5.3) and older, if the password type is set to “Specified by sender”.
High [CVE-2022-4934] post-auth command injection vulnerability in the exception wizard of Sophos Web Appliance older than version 4.3.10.4
A post-auth command injection vulnerability in the exception wizard of Sophos Web Appliance older than version 4.3.10.4 allows administrators to execute arbitrary code.
High [CVE-2022-3713] Sophos Firewall: code injection vulnerability
A code injection vulnerability allows adjacent attackers to execute code in the Wifi controller of Sophos Firewall releases older than version 19.5 GA.
High [CVE-2022-3696] Sophos Firewall: post-auth code injection vulnerability
A post-auth code injection vulnerability allows admins to execute code in Webadmin of Sophos Firewall releases older than version 19.5 GA.
High [CVE-2022-3226] Sophos Firewall: OS command injection vulnerability allows admins to execute code
An OS command injection vulnerability allows admins to execute code via SSL VPN configuration uploads in Sophos Firewall releases older than version 19.5 GA.
High [CVE-2022-1807] Sophos Firewall: Multiple SQLi vulnerabilities in Webadmin
Multiple SQLi vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall older than version 18.5 MR4 and version 19.0 MR1.
High [CVE-2021-25268] Sophos Firewall: Multiple XSS vulnerabilities in Webadmin
Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from MySophos admin to SFOS admin in Sophos Firewall older than version 19.0 GA.
High [CVE-2022-0386] Sophos UTM: post-auth SQL injection vulnerability in the Mail Manager potentially
A post-auth SQL injection vulnerability in the Mail Manager potentially allows an authenticated attacker to execute code in Sophos UTM before version 9.710.
High [CVE-2022-0366] authenticated and authorized agent user could potentially gain administrative access
An authenticated and authorized agent user could potentially gain administrative access via an SQLi vulnerability to Capsule8 Console between versions 4.6.0 and 4.9.1.
High [CVE-2021-36807] authenticated user could potentially execute code
An authenticated user could potentially execute code via an SQLi vulnerability in the user portal of SG UTM before version 9.708 MR8.
High [CVE-2021-25265] Sophos Connect: malicious website could execute code remotely in Sophos Connect Client before version 2.1.
A malicious website could execute code remotely in Sophos Connect Client before version 2.1.