Security Advisory Listing

Advisory: Linux Kernel TCP Vulnerability (CVE-2026-98432)

CVE-2026-98432

High

Updated

—

Article Version

5

Product Family

Sophos Firewall

Sophos RED

Sophos UTM

Advisory: eMudhra Intermediate CA Certificates Compromised

High

Updated

—

Article Version

1

Product Family

Sophos UTM

Sophos ZTNA

Sophos Firewall

Advisory: Fortinet “FortiBleed” Credential Exposure and Sophos VPN Bruteforcing Campaign

Informational

Updated

—

Article Version

2

Product Family

Sophos Firewall

Advisory: Linux Kernel LPE - Dirty Frag

Informational

Updated

—

Article Version

2

Product Family

Cloud Optix

Sophos Endpoint

Sophos Central

Sophos Email

Sophos Firewall

Sophos Home

Sophos RED

Sophos Switch

Sophos UTM

Sophos Wireless

SophosLabs Intelix

Advisory: Linux Kernel LPE - Copy Fail (CVE-2026-31431)

CVE-2026-31431

Informational

Updated

—

Article Version

3

Product Family

Cloud Optix

Sophos Endpoint

Sophos Central

Sophos Email

Sophos Firewall

Sophos Home

Sophos RED

Sophos Switch

Sophos UTM

Sophos Wireless

SophosLabs Intelix

Resolved Multiple Vulnerabilities in Sophos Firewall (CVE-2025-6704, CVE-2025-7624, CVE-2025-7382, CVE-2024-13974, CVE-2024-13973)

CVE-2025-6704

CVE-2025-7624

CVE-2025-7382

CVE-2024-13974

CVE-2024-13973

critical

Updated

—

Article Version

1

Product Family

sophos_firewall

Advisory: GitHub Action tj-actions/changed-files Compromise (CVE-2025-30066)

CVE-2025-30066

informational

Updated

—

Article Version

1

Product Family

cloud_optix

sophos_endpoint

sophos_central

sophos_email

sophos_firewall

sophos_home

sophos_red

sophos_utm

sophos_wireless

sophos_ztna

sophoslabs_intelix

Resolved Multiple Vulnerabilities in Sophos Firewall (CVE-2024-12727, CVE-2024-12728, CVE-2024-12729)

CVE-2024-12727

CVE-2024-12728

CVE-2024-12729

Critical

Updated

—

Article Version

1

Product Family

Sophos Firewall

Advisory: CUPS Vulnerabilities

CVE-2024-47076

CVE-2024-47175

CVE-2024-47176

CVE-2024-47177

informational

Updated

—

Article Version

1

Product Family

Cloud Optix

Sophos Central

Sophos Firewall

Sophos RED

Sophos Switch

Sophos UTM

Sophos Wireless

Advisory: Unauthenticated Remote Code Execution Vulnerability in OpenSSH (CVE-2024-6387)

CVE-2024-6387

informational

Updated

—

Article Version

3

Product Family

Cloud Optix

Sophos Endpoint

Sophos Central

Sophos Email

Sophos Firewall

Sophos Home

Sophos Mobile

Sophos Mobile EAS Proxy

Sophos RED

Sophos Secure Workspace (Android)

Sophos Switch

Sophos UTM

Sophos Wireless

SophosLabs Intelix

Advisory: Upstream Backdoor in XZ library

CVE-2024-3094

informational

Updated

—

Article Version

1

Product Family

Cloud Optix

Sophos Endpoint

Sophos Central

Sophos Email

Sophos Firewall

Sophos Home

Sophos Mobile

Sophos RED

Sophos Switch

Sophos UTM

Sophos Wireless

Sophos ZTNA

SophosLabs Intelix

Advisory: Leaky Vessels vulnerabilities in Docker and runc

CVE-2024-21626

CVE-2024-23651

CVE-2024-23652

CVE-2024-23653

informational

Updated

—

Article Version

3

Product Family

Cloud Optix

Sophos Endpoint

Sophos Central

Sophos Email

Sophos Firewall

Sophos Home

Sophos Mobile

Sophos Mobile EAS Proxy

Sophos RED

Sophos Switch

Sophos UTM

Sophos Wireless

Sophos ZTNA

SophosLabs Intelix

Resolved RCE in Sophos Firewall (CVE-2022-3236)

CVE-2022-3236

Critical

Updated

—

Article Version

3

Product Family

Sophos Firewall

Advisory: libwebp critical vulnerability

CVE-2023-4863

informational

Updated

—

Article Version

2

Product Family

Cloud Optix

Sophos Endpoint

Sophos Central

Sophos Connect Client 2.0

Sophos Email

Sophos Email Appliance (SEA)

Sophos Firewall

Sophos Home

Sophos Mobile

Sophos RED

Sophos Switch

Sophos UTM

Sophos Wireless

Sophos ZTNA

SophosLabs Intelix

Advisory: curl high severity vulnerability

CVE-2023-38545

informational

Updated

—

Article Version

1

Product Family

cloud_optix

sophos_endpoint

safeguard_enterprise_sgn

sophos_central

sophos_connect_client_20

sophos_email

sophos_firewall

sophos_home

sophos_mobile

sophos_mobile_eas_proxy

sophos_red

sophos_switch

sophos_utm

sophos_wireless

sophos_ztna

sophoslabs_intelix

Resolved SPX password disclosure in Sophos Firewall (CVE-2023-5552)

CVE-2023-5552

high

Updated

—

Article Version

1

Product Family

sophos_firewall

Multiple Vulnerabilities in Exim

CVE-2023-42114

CVE-2023-42115

CVE-2023-42116

CVE-2023-42117

CVE-2023-42118

CVE-2023-42119

high

Updated

—

Article Version

1

Product Family

Sophos Firewall

Sophos UTM

Advisory: OpenSSL high severity vulnerability

CVE-2023-0286

informational

Updated

—

Article Version

2

Product Family

Cloud Optix

Sophos Endpoint

Sophos Central

Sophos Connect Client 2.0

Sophos Email

Sophos Email Appliance (SEA)

Sophos Enterprise Console (SEC)

Sophos Firewall

Sophos Home

Sophos Mobile

Sophos Mobile EAS Proxy

Sophos RED

Sophos UTM

Sophos Web Appliance (SWA)

Sophos Wireless

SophosLabs Intelix

Sophos Firewall v19.5 GA Resolves Security Vulnerabilities

CVE-2022-3236

CVE-2022-3226

CVE-2022-3713

CVE-2022-3696

CVE-2022-3709

CVE-2022-3711

CVE-2022-3710

Critical

Updated

—

Article Version

3

Product Family

sophos_firewall

Advisory: OpenSSL 3.x critical vulnerability

CVE-2022-3786

CVE-2022-3602

Informational

Updated

—

Article Version

3

Product Family

cloud_optix

sophos_endpoint

reflexion

safeguard_enterprise_sgn

sophos_authenticator

sophos_central

sophos_connect_client_20

sophos_email

sophos_email_appliance_sea

sophos_enterprise_console_sec

sophos_firewall

sophos_home

sophos_mobile

sophos_mobile_eas_proxy

sophos_red

sophos_transparent_authentication_suite_stas

sophos_utm

sophos_utm_manager

sophos_web_appliance_swa

sophos_wireless

sophos_ztna

sophoslabs_intelix