CVE-2021-36809: Sophos SSL VPN Client

Medium severity, CVSS 6.0. EPSS: 0.2% chance of exploitation in the next 30 days.

A local attacker can overwrite arbitrary files on the system with VPN client logs using administrator privileges, potentially resulting in a denial of service and data loss, in all versions of Sophos SSL VPN client.

Affected products

• Sophos SSL VPN Client: affected versions not specified

Published 2022-03-08. Last modified 2026-06-17.