CVE-2021-25271: Sophos Hitmanpro

Medium severity, CVSS 6.0. EPSS: 0.2% chance of exploitation in the next 30 days.

A local attacker could read or write arbitrary files with administrator privileges in HitmanPro before version Build 318.

Affected products

• Sophos Hitmanpro: before 318 (fixed in 318)

Published 2021-10-08. Last modified 2026-06-17.