sev:CRIT ../ in a security appliance? I'm shocked. SHOCKED! Well, not that shocked.
Yes, it's EoL but still, it's in a security device.
https://www.sophos.com/en-us/security-advisories/sophos-sa-20261028-utm-rce
> A path traversal vulnerability allows a remote unauthenticated attacker to execute arbitrary code as root in Sophos UTM (all versions) after winning a race condition by sustaining repeated attacks for a few minutes when the email proxy is used with scanning enabled. Sophos UTM is end-of-life and the patch must be installed manually.
:rainbowCrow:
npub1s6…8n008
2026-10-28 21:51:28 UTC
Author Public Key
npub1s6eewzr2zvz3ppsa6k8j2hadamsug7q4rp068wmz3grtf440xxkqr8n008Published at
2026-10-28 21:51:28 UTCEvent JSON
{
"id": "0814ffd3f39bff4aac792be21a8164be2fc8ac727848dcc93d0999ae9ac42c93",
"pubkey": "86b397086a130510861dd58f255fadeee1c47815185fa3bb628a06b4d6af31ac",
"created_at": 1793224288,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/@cR0w/117520746971033183",
"web"
],
[
"proxy",
"https://infosec.exchange/users/cR0w/statuses/117520746971033183",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/cR0w/statuses/117520746971033183",
"pink.momostr"
],
[
"-"
]
],
"content": "sev:CRIT ../ in a security appliance? I'm shocked. SHOCKED! Well, not that shocked.\n\nYes, it's EoL but still, it's in a security device.\n\nhttps://www.sophos.com/en-us/security-advisories/sophos-sa-20261028-utm-rce\n\n\u003e A path traversal vulnerability allows a remote unauthenticated attacker to execute arbitrary code as root in Sophos UTM (all versions) after winning a race condition by sustaining repeated attacks for a few minutes when the email proxy is used with scanning enabled. Sophos UTM is end-of-life and the patch must be installed manually.",
"sig": "27764bf699ab66adf7e02a38f430c1237a1dc2c1e601c0d3e98fa4c930c6f005fccb7085bdb0e090a45129620f58c76ef81279b142f3fe1c83f33fa9d01187fe"
}