Skip to content
Exploit Radar Choose my productsProducts My radar
English

Products › Brands

Brand

Sophos: actively exploited vulnerabilities

7 vulnerabilities in Sophos products (Firewall (SFOS, ex-XG), CyberoamOS (Cyberoam), SG UTM…) are in CISA’s catalog of exploited vulnerabilities. Last added: February 6, 2025.

Sophos security advisories

The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).

By category

Add just one Sophos category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

  • Firewall (SFOS, ex-XG) 4 vulnerabilities · Firewalls and VPNs
  • CyberoamOS (Cyberoam) 1 vulnerability · Firewalls and VPNs
  • SG UTM 1 vulnerability · Firewalls and VPNs
  • Web Appliance 1 vulnerability · Security products

Name used by CISA: Sophos. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Sophos list.

  1. Rank 1Sophos Firewall (SFOS, ex-XG)

    CVE-2020-15069

    CVE from 2020, added in 2025

    Sophos XG Firewall Buffer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Feb 6, 2025
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

  2. Rank 2Sophos Web Appliance

    CVE-2023-1671

    Sophos Web Appliance Command Injection Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 16, 2023
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

  3. Rank 3Sophos Firewall (SFOS, ex-XG)

    CVE-2022-3236

    Sophos Firewall Code Injection Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 23, 2022
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

  4. Rank 4Sophos Firewall (SFOS, ex-XG)

    CVE-2022-1040

    Sophos Firewall Authentication Bypass Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 31, 2022
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

  5. Rank 5Sophos SG UTM

    CVE-2020-25223

    CVE from 2020, added in 2022

    Sophos SG UTM Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 25, 2022
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

  6. Rank 6Sophos Firewall (SFOS, ex-XG)

    CVE-2020-12271

    Ransomware

    Sophos SFOS SQL Injection Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    9.8 (critical)

End of life: remove

These products are no longer supported: no patch is coming. Remove them or isolate them from the network.

  1. Sophos CyberoamOS (Cyberoam)

    CVE-2020-29574

    RansomwareEnd of lifeCVE from 2020, added in 2025

    CyberoamOS (CROS) SQL Injection Vulnerability

    End-of-life product: no patch is coming; remove or isolate it.

    Added
    Feb 6, 2025
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

Follow and verify

Get new Sophos vulnerabilities: RSS feed (add it to Outlook, Teams, Slack or your feed reader).

Indicative classification, based on the vendor and product names given by CISA. How products are classified.