CVE-2022-0386: Sophos Unified Threat Management

High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days.

A post-auth SQL injection vulnerability in the Mail Manager potentially allows an authenticated attacker to execute code in Sophos UTM before version 9.710.

Affected products

• Sophos Unified Threat Management: before 9.710 (fixed in 9.710)

Published 2022-03-22. Last modified 2026-06-17.