Sg Utm
Monthly
Remote code execution as root in Sophos UTM (SG UTM) affects all versions when the email proxy is used with scanning enabled; unauthenticated network attackers can exploit a path traversal flaw, but must win a race condition by sustaining repeated attacks for several minutes. The product is end-of-life and requires a manual patch, so exposure persists until an operator actively installs the vendor fix. No public exploit has been identified at time of analysis, and the priority decision is act_now based on the vendor report and assessed impact.
Remote code execution as root in Sophos UTM (SG UTM) affects all versions when the email proxy is used with scanning enabled; unauthenticated network attackers can exploit a path traversal flaw, but must win a race condition by sustaining repeated attacks for several minutes. The product is end-of-life and requires a manual patch, so exposure persists until an operator actively installs the vendor fix. No public exploit has been identified at time of analysis, and the priority decision is act_now based on the vendor report and assessed impact.