CVE-2022-48310: Sophos Connect

Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days.

An information disclosure vulnerability allows sensitive key material to be included in technical support archives in Sophos Connect versions older than 2.2.90.

Affected products

• Sophos Connect: before 2.2.90 (fixed in 2.2.90)

Published 2023-03-01. Last modified 2026-06-17.