CVE-2020-17352: Sophos XG Firewall Firmware

High severity, CVSS 8.8. EPSS: 4.1% chance of exploitation in the next 30 days.

Two OS command injection vulnerabilities in the User Portal of Sophos XG Firewall through 2020-08-05 potentially allow an authenticated attacker to remotely execute arbitrary code.

Affected products

• Sophos XG Firewall Firmware: version 17.5 only; version 18.0 only

Published 2020-08-07. Last modified 2026-06-17.