Sophos
7 Sophos flaws are on CISA's list of vulnerabilities attackers have used, 0 of them added in 2026. CISA says 2 are known to be used by ransomware. The latest was added Feb 6, 2025.
7on CISA's list, all time
0added in 2026
0in the last 90 days
2used by ransomware
2zero-days, all time
Exploited flaws added each year
Most-hit products
| Product | Exploited flaws | Most recent |
|---|---|---|
| Firewall | 2 | Sep 23, 2022 |
| XG Firewall | 1 | Feb 6, 2025 |
| CyberoamOS | 1 | Feb 6, 2025 |
| Web Appliance | 1 | Nov 16, 2023 |
| SG UTM | 1 | Mar 25, 2022 |
| SFOS | 1 | Nov 3, 2021 |
Latest Sophos flaws
- XG FirewallSophos XG Firewall Buffer Overflow Vulnerability
- CyberoamOSCyberoamOS (CROS) SQL Injection Vulnerability
- Web ApplianceSophos Web Appliance Command Injection Vulnerability
- FirewallSophos Firewall Code Injection Vulnerability
- FirewallSophos Firewall Authentication Bypass Vulnerability
- SG UTMSophos SG UTM Remote Code Execution Vulnerability
- SFOSSophos SFOS SQL Injection Vulnerability
Counts come from CISA's Known Exploited Vulnerabilities catalog, which lists flaws with reliable evidence of real attacks. A higher count often reflects how widely a vendor's products are used and targeted, not only how secure they are.