Vendor
Sophos
As of , 7 Sophos vulnerabilities are on CISA's list of exploited vulnerabilities, 2 of them used in ransomware campaigns; 0 were added in 2026. Patch first: CVE-2020-25223.
Patch first
| # | Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|---|
| 1 | CVE-2020-25223Remote Code Execution | Sophos SG UTM | Patch this weekMetasploit module; EPSS 0.97 | 0.97 | ||
| 2 | CVE-2023-1671Command Injection | Sophos Web Appliance | Patch this weekEPSS 0.99 | 0.99 | ||
| 3 | CVE-2022-3236Code Injection | Sophos Firewall | Patch this weekEPSS 0.99 | 0.99 | ||
| 4 | CVE-2022-1040Authentication Bypass | Sophos Firewall | Patch this weekEPSS 0.99 | 0.99 | ||
| 5 | CVE-2020-12271SQL Injection | Sophos SFOS | Patch this weekRansomware use | 0.42 | ||
| 6 | CVE-2020-29574(CROS) SQL Injection | Sophos CyberoamOS | Patch this weekRansomware use | 0.05 | ||
| 7 | CVE-2020-15069Buffer Overflow | Sophos XG Firewall | Patch soon | 0.11 |
Products
- Firewall2 entries
- CyberoamOS1 entry
- SFOS1 entry
- SG UTM1 entry
- Web Appliance1 entry
- XG Firewall1 entry
Added each year
Show the numbers
| Period | entries added |
|---|---|
| 2021 | 1 |
| 2022 | 3 |
| 2023 | 1 |
| 2024 | none |
| 2025 | 2 |
| 2026 | none |