CVE-2026-118633
CVE-2026-118633
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
A path traversal vulnerability allows a remote unauthenticated attacker to execute arbitrary code as root in Sophos UTM (all versions) after winning a race condition by sustaining repeated attacks for a few minutes when the email proxy is used with scanning enabled. Sophos UTM is end-of-life and the patch must be installed manually.
CVSS 9.2 · Crítica · EPSS 0,6%
- Publicación
- Actualización
Productos y versiones afectados
sg utm
- Versiones
- ≥ 0, ≤ 9.724: Afectada (custom)
Sin corrección publicada