← Back to browse · API

CVE-2022-3236

Severity
CRITICAL
CVSS
9.8
EPSS
0.98905
Risk score
59.62
CISA KEV
Yes
PoC
No
Published
2022-09-23
Modified
2025-10-21
First seen
2026-08-07
Aliases
EUVD-2022-42644, GHSA-JV5X-4HFR-X3P5
Products
Sophos:Firewall, Sophos:Sophos Firewall unspecified ≤18.5 MR4, Sophos:Sophos Firewall unspecified ≤19.0 MR1
Sources
cisa.gov CVE-2022-3236
euvd EUVD-2022-42644

Description

A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v19.0 MR1 and older.

References