Sg Utm (Sophos) - vulnerabilities (CVEs)

2 CVEs, 1 in the last 30 days, 1 known versions, newest CVE from 2026-10-28. Vendor: Sophos.

CVEs of Sg Utm

• CVE-2026-118633 - CVSS 9.2 (critical), 2026-10-28: A path traversal vulnerability allows a remote unauthenticated attacker to execute arbitrary code as root in Sophos UTM (all versions) after winning a race…
• CVE-2021-36807 - CVSS 8.8 (high), 2021-11-26: An authenticated user could potentially execute code via an SQLi vulnerability in the user portal of SG UTM before version 9.708 MR8.