Sophos
In 3 briefs, most recently 13 January 2026. RSS for this tag
Learn more: Vulnerabilities (NVD) ↗
Known exploited (CISA KEV)
7 Sophos vulnerabilities are on CISA's list of vulnerabilities exploited in the wild, 2 of them used in ransomware campaigns. Most recent:
- CVE-2020-29574 CyberoamOS (CROS) SQL Injection Vulnerability
- CVE-2020-15069 Sophos XG Firewall Buffer Overflow Vulnerability
- CVE-2023-1671 Sophos Web Appliance Command Injection Vulnerability
- CVE-2022-3236 Sophos Firewall Code Injection Vulnerability
- CVE-2022-1040 Sophos Firewall Authentication Bypass Vulnerability
- CVE-2020-25223 Sophos SG UTM Remote Code Execution Vulnerability
- CVE-2020-12271 Sophos SFOS SQL Injection Vulnerability
Coverage in DanSec Daily
- Hackers selling Target source code, the n8n "Ni8mare" flaw hitting about 60,000 instances, and a Gogs zero-day under a CISA patch order.
- BlackSuit ransomware sites seized, Toptal GitHub breach poisons npm packages, and ToolShell SharePoint flaws hit 400+ servers.
- NNSA breach via Microsoft SharePoint zero-days, Clorox's $380M suit against Cognizant, and a backdoored npm 'is' package.