Path Traversal Vulnerability in Sophos UTM Affects All Versions

CVE-2026-118633

What is CVE-2026-118633?

A path traversal vulnerability exists within Sophos UTM that allows a remote unauthenticated attacker to execute arbitrary code as root. This occurs after a series of sustained attacks exploiting a race condition, particularly when the email proxy feature is enabled with scanning active. Notably, Sophos UTM has reached its end-of-life, meaning that any essential patches must be applied manually by administrators to mitigate potential risks.

References