Actively Exploited Vulnerabilities
An authentication bypass vulnerability in User Portal and Webadmin of Sophos Firewall allows for remote code execution.
Apply updates per vendor instructions.
CWE-158