Read the docs
TI-2025-09326 Aliases CVE-2025-10159GHSA-mvm4-phm8-xg5p

An authentication bypass vulnerability allows remote attackers to gain administrative…

Priority MEDIUM 51CWE-620Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

An authentication bypass vulnerability allows remote attackers to gain administrative privileges on Sophos AP6 Series Wireless Access Points older than firmware version 1.7.2563 (MR7).

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00906 60th percentileScored 2026-11-07
Fix Fixed AP6 Series Wireless Access Points (Sophos): 1.7.2563 (MR7)

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
SophosAP6 Series Wireless Access Pointsbefore 1.7.2563 (MR7)1.7.2563 (MR7)Patch availableCNA
  • AP6 Series Wireless Access Points VendorSophos Affected before 1.7.2563 (MR7) Fixed in 1.7.2563 (MR7) Patch available CNA

Remediation

  • Fix · CNA AP6 Series Wireless Access Points (Sophos) Fixed in 1.7.2563 (MR7)

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-10159
  2. 2026-10-03 Alias added: GHSA-mvm4-phm8-xg5p

References

Other 1

  • TI-2023-01568 Command injection in Sophos Web Appliance KEVCVSS 3.1CRITICAL 9.8
  • TI-2022-02989 Code injection in Sophos Firewall KEVCVSS 3.1CRITICAL 9.8
  • TI-2022-00937 An authentication bypass vulnerability in the User Portal and Webadmin allows a remote… KEVCVSS 3.1CRITICAL 9.8
  • TI-2020-17763 An SQL injection vulnerability in the WebAdmin of Cyberoam OS through 2020-12-04 allows… KEVCVSS 3.1CRITICAL 9.8
  • TI-2020-15463 A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM before… KEVCVSS 3.1CRITICAL 9.8
  • TI-2020-11847 Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code… KEVCVSS 3.1CRITICAL 9.8
See all 174 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences