Sophos UTM - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/sophos-utm/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 28 Oct 2026 23:37:00 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgSophos UTM: Unauthenticated Remote Code Execution (CVE-2026-118633)https://feed.craftedsignal.io/briefs/2026-10-sophos-utm-rce/Wed, 28 Oct 2026 23:37:00 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-sophos-utm-rce/A path traversal and race condition vulnerability exists in the Sophos UTM email proxy, allowing unauthenticated remote attackers to execute arbitrary code as root.<p>A path traversal vulnerability combined with a race condition in the Sophos UTM email proxy allows a remote unauthenticated attacker to execute arbitrary code as root. Successful exploitation requires sustaining repeated attacks for several minutes while the email proxy is used with scanning enabled. Sophos UTM is end-of-life, and patches must be applied manually. A Proof of Concept (PoC) exploit has been published on Sploitus.</p> highadvisoryvulnerabilityrcesophos