Known Vulnerabilities for Web Appliance by Sophos
Listed below are 10 of the newest known vulnerabilities associated with "Web Appliance" by "Sophos".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
More device details and information can be found at device.report here: Sophos Web Appliance
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-120869 json | An unauthenticated attacker can bypass authentication controls to access restricted resources on the Citrix NetScaler Console... | Not Provided | 2026-11-12 | 2026-11-12 |
| CVE-2026-116606 json | An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote... | Not Provided | 2026-11-02 | 2026-11-11 |
| CVE-2026-111560 json | Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products u... | Not Provided | 2026-11-02 | 2026-11-11 |
| CVE-2026-109126 json | IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a physically proximate atta... | Not Provided | 2026-10-20 | 2026-10-20 |
| CVE-2026-107245 json | Versa has confirmed a buffer overflow vulnerability in the IPsec implementation on VOS, aka Versa FlexVNF. ... | Not Provided | 2026-11-10 | 2026-11-12 |
| CVE-2026-107244 json | The Node.js web service on VOS (previously Versa FlexVNF) is used for URL-based Zero Touch Provisioning (ZTP) of the VOS appl... | Not Provided | 2026-11-10 | 2026-11-12 |
| CVE-2026-107243 json | The Node.js web service on VOS (previously Versa FlexVNF) is used for URL-based Zero Touch Provisioning (ZTP) of the VOS appl... | Not Provided | 2026-11-10 | 2026-11-12 |
| CVE-2026-107242 json | The Node.js web service on VOS (previously Versa FlexVNF) is used for URL-based Zero Touch Provisioning (ZTP) of the VOS appl... | Not Provided | 2026-11-10 | 2026-11-12 |
| CVE-2026-107241 json | The Node.js web service on VOS (previously Versa FlexVNF) is used for URL-based Zero Touch Provisioning (ZTP) of the VOS appl... | Not Provided | 2026-11-10 | 2026-11-12 |
| CVE-2026-107240 json | The Node.js web service on VOS (previously Versa FlexVNF) is used for URL-based Zero Touch Provisioning (ZTP) of the VOS appl... | Not Provided | 2026-11-10 | 2026-11-12 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Sophos | Web Appliance | 4.3.1.1 | |||
| Application | Sophos | Web Appliance | 3.8.1 | |||
| Application | Sophos | Web Appliance | 3.8.0 | |||
| Application | Sophos | Web Appliance | 3.7.9 | |||
| Application | Sophos | Web Appliance | 3.7.8.2 | |||
| Application | Sophos | Web Appliance | 3.7.8.1 | |||
| Application | Sophos | Web Appliance | 3.7.8 | |||
| Application | Sophos | Web Appliance | 3.7.7 | |||
| Application | Sophos | Web Appliance | 3.7.6 | |||
| Application | Sophos | Web Appliance | 3.7.5 | |||
| Application | Sophos | Web Appliance | 3.7.4 | |||
| Application | Sophos | Web Appliance | 3.7.3 | |||
| Application | Sophos | Web Appliance | 3.7.2 | |||
| Application | Sophos | Web Appliance | 3.7.1 | |||
| Application | Sophos | Web Appliance | 3.7.0 | |||
| Application | Sophos | Web Appliance | 3.6.4.2 | |||
| Application | Sophos | Web Appliance | 3.6.4.1 | |||
| Application | Sophos | Web Appliance | 3.6.4 | |||
| Application | Sophos | Web Appliance | 3.6.3 | |||
| Application | Sophos | Web Appliance | 3.6.2.4.1 |