CyberSec.Space Logo
CVEブラウザに戻る

CVE-2022-3236

🔥 Known Exploited (CISA KEV)CRITICAL
9.8
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2022-09-23
Last Modified2026-06-17
Data SourcesNVDCISA KEV

Vulnerability Description

A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v19.0 MR1 and older.

Affected Platforms (CPE)

📦
Sophos

Firewall

<= 19.0.1

References & Advisories

🔗 https://www.sophos.com/en-us/security-advisories/sophos-sa-20220923-sfos-rce
🔗 https://www.sophos.com/en-us/security-advisories/sophos-sa-20220923-sfos-rce
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-3236

関連するセキュリティ記事

ウィークリー・サイバーセキュリティ・ニュース：2026年7月27日

今週の主要セキュリティニュース：Check Point SmartConsole CVE-2026-16232 認証回避の悪用、Qilin ランサムウェアによる PAN-OS 攻撃、ロシア背景 LAUNDRY BEAR による Zimbra 標的型攻撃、および FakeGit リポジトリ脅威の分析。

2026-07-27

関連する脆弱性情報

CVE-2026-464158.2

The Caddy Defender plugin is a middleware for Caddy that allows users to block or manipulate requests based on the client's IP add...

CVE-2026-617185.4

bunkerweb is an Open-source and next-generation Web Application Firewall (WAF). From 1.6.2 until 1.6.12, the BunkerWeb web UI Bisc...

CVE-2026-54728

bunkerweb is an Open-source and next-generation Web Application Firewall (WAF). Prior to BunkerWeb 1.6.12 and BunkerWeb PRO 0.57, ...

CVE-2026-623145.8

Anubis is a Web AI Firewall Utility that challenges users' connections in order to protect upstream resources from scraper bots. F...