/Vulnerability Library

Sophos Firewall <= 19.0 MR1 - Remote Code Execution

CVE-2022-3236
Verified

Description

Sophos Firewall version v19.0 MR1 and older is vulnerable to code injection in the User Portal and Webadmin, allowing a remote unauthenticated attacker to execute arbitrary code.

Severity

Critical

CVSS Score

9.8

Exploit Probability

99%

Affected Product

firewall

Published Date

January 9, 2026

Template Author

daffainfo

CVE-2022-3236.yaml
9.8Score

CVSS Metrics

CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVE ID:
cve-2022-3236
CWE ID:
cwe-94

References

https://www.thezdi.com/blog/2022/10/19/cve-2022-3236-sophos-firewall-user-portal-and-web-admin-code-injectionhttps://nvd.nist.gov/vuln/detail/cve-2022-3236

Remediation Steps

Update to the latest version of Sophos Firewall.