CVE-2026-118633
CVE-2026-118633
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
A path traversal vulnerability allows a remote unauthenticated attacker to execute arbitrary code as root in Sophos UTM (all versions) after winning a race condition by sustaining repeated attacks for a few minutes when the email proxy is used with scanning enabled. Sophos UTM is end-of-life and the patch must be installed manually.
CVSS 9.2 · Critique · EPSS 0,6%
- Publication
- Mise à jour
Produits et versions concernés
sg utm
- Versions du logiciel
- ≥ 0, ≤ 9.724: Concernée (custom)
Aucun correctif publié