S
Vendor security profile7 actively exploited CVEs
Sophos
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs8
Critical3
CISA KEV7
Public exploit7
Patch rate%0
Avg. CVSS9.6
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
1
0
0
CVE KEV
CVE severity distribution
8toplam CVE
Critical3 (38%)
Uncertain5 (63%)
Patch and exploitation view
%0
Verified patch
%88
CISA KEV
%88
Public exploit
0Patch available
0Partial
7Workaround
0Vendor: no patch
1Unknown
Latest vulnerabilities
9.3
CVE-2026-18367Vulnerability in Sophos Endpoint For macOS
Patch status unknownEPSS %0
-
CVE-2023-1671 Actively exploitedSophos Web Appliance Command Injection Vulnerability
Workaround Public Exploits:6EPSS %100
9.8
CVE-2022-3236 Actively exploitedCode injection in Sophos Firewall
Workaround Public Exploits:1EPSS %99
-
CVE-2022-1040 Actively exploitedSophos Firewall Authentication Bypass Vulnerability
Workaround Public Exploits:8EPSS %100
-
CVE-2020-25223 Actively exploitedSophos SG UTM Remote Code Execution Vulnerability
Workaround Public Exploits:2EPSS %97
9.8
CVE-2020-29574 Actively exploitedVulnerability in N/a
WorkaroundEPSS %5