# Sophos security incidents · pwn.watch

> Security incidents tagged Sophos (vendor, product, platform or attack type).

Page: https://pwn.watch/t/sophos · generated 2026-10-23T01:56:39.502Z

## Status (as of 2026-10-23)
- Incidents: 3 (0 live, 0 live and not fully patched, 2 patched)
- Days without a Sophos security incident: 624
- Newest incident started: 2025-02-06

## Feeds
- JSON (incidents + changes + posts): https://pwn.watch/t/sophos.json
- RSS (one item per incident, bumped on each update): https://pwn.watch/t/sophos/feed.xml
- This file: https://pwn.watch/t/sophos/llms.txt
- Whole site: https://pwn.watch/llms.txt · all tags: https://pwn.watch/tags.json

## Incidents (newest first by start date)
- [Sophos CyberoamOS: CyberoamOS (CROS) SQL Injection Vulnerability](https://pwn.watch/i/sophos-cyberoamos-cve-2020-29574) ([json](https://pwn.watch/i/sophos-cyberoamos-cve-2020-29574.json)): critical, closed, unpatched, started 2025-02-06, CVE-2020-29574
- [Sophos XG Firewall: XG Firewall Buffer Overflow Vulnerability](https://pwn.watch/i/sophos-xg-firewall-cve-2020-15069) ([json](https://pwn.watch/i/sophos-xg-firewall-cve-2020-15069.json)): critical, closed, patched, started 2025-02-06, CVE-2020-15069
- [Sophos Web Appliance: Command Injection (CVE-2023-1671)](https://pwn.watch/i/sophos-web-appliance-cve-2023-1671) ([json](https://pwn.watch/i/sophos-web-appliance-cve-2023-1671.json)): critical, closed, patched, started 2023-11-16, CVE-2023-1671