Security Digest
Sophos: known exploited vulnerabilities
3 Sophos CVEs CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.
| Added | CVE | Product and flaw | CISA due |
|---|---|---|---|
| 2025-02-06 | CVE-2020-29574 | Sophos CyberoamOS CyberoamOS (CROS) SQL Injection Vulnerability Ransomware | 2025-02-27 |
| 2025-02-06 | CVE-2020-15069 | Sophos XG Firewall Sophos XG Firewall Buffer Overflow Vulnerability | 2025-02-27 |
| 2023-11-16 | CVE-2023-1671 | Sophos Web Appliance Sophos Web Appliance Command Injection Vulnerability | 2023-12-07 |