Security feed

24 October 2026

Unrated

Sophos Firewall Authentication Bypass Vulnerability

Type: advisorySource: CISA Known Exploited VulnerabilitiesKnown exploited24 Oct 2026, 21:22 UTC

An authentication bypass vulnerability in User Portal and Webadmin of Sophos Firewall allows for remote code execution. CISA required action: Apply updates per vendor instructions.

Products: FirewallCVEs: CVE-2022-1040

Critical

Sophos Firewall Code Injection Vulnerability

Type: advisorySource: CISA Known Exploited VulnerabilitiesKnown exploited24 Oct 2026, 21:02 UTC

A code injection vulnerability in the User Portal and Webadmin of Sophos Firewall allows for remote code execution. CISA required action: Apply updates per vendor instructions.

Products: FirewallCVEs: CVE-2022-3236