CVE-2021-36807: Sophos Unified Threat Management UP2DATE

High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days.

An authenticated user could potentially execute code via an SQLi vulnerability in the user portal of SG UTM before version 9.708 MR8.

Affected products

• Sophos Unified Threat Management UP2DATE: before 9.708 (fixed in 9.708)

Published 2021-11-26. Last modified 2026-06-17.