CVE-2021-25265: Sophos Connect

High severity, CVSS 8.8. EPSS: 2% chance of exploitation in the next 30 days.

A malicious website could execute code remotely in Sophos Connect Client before version 2.1.

Affected products

• Sophos Connect: before 2.1 (fixed in 2.1)

Published 2021-03-22. Last modified 2026-06-17.