Read the docs
TI-2021-14927 Aliases CVE-2021-36807GHSA-3rf7-6c99-mx43

SQL injection in Sophos SG UTM

Priority MEDIUM 41CWE-89Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
SQL injection
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-89.

Summary

An authenticated user could potentially execute code via an SQLi vulnerability in the user portal of SG UTM before version 9.708 MR8.

Why it matters now

EPSS 0.01498 74th percentileScored 2026-11-07
Fix Fixed SG UTM (Sophos): 9.708 MR8

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SophosSG UTMbefore 9.708 MR89.708 MR8Patch availableCNA
  • SG UTM VendorSophos Affected before 9.708 MR8 Fixed in 9.708 MR8 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:sophos:unified_threat_management_up2date:*:*:*:*:*:*:*:*before 9.708VulnerableSophos
  • cpe:2.3:a:sophos:unified_threat_management_up2date:*:*:*:*:*:*:*:* Versions before 9.708 Vulnerable ·Sophos

Remediation

  • Fix · CNA SG UTM (Sophos) Fixed in 9.708 MR8

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-36807
  2. 2026-10-03 Alias added: GHSA-3rf7-6c99-mx43

References

Advisory 1

  • TI-2015-07072 ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote… CVSS 3.0MEDIUM 6.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences