---
title: Serious RCE Vulnerability Found in Sophos UTM
url: https://www.dataloco.com/en/serious-rce-vulnerability-found-in-sophos-utm
published: 2026-10-31T17:20:50+00:00
language: en
section: Security
source: https://www.security-next.com/192142
organizations: sophos, eol, rce
publisher: Dataloco
---

# Serious RCE Vulnerability Found in Sophos UTM

A serious vulnerability has been identified in Sophos's security gateway product, Sophos UTM. Although support for the product has already ended, the company has prepared a fix and urges users to apply it promptly.

On October 28, 2026, the company published a security advisory detailing the path traversal vulnerability identified as CVE-2026-118633. This vulnerability was reported through the company’s bug bounty program by external security researchers.

The vulnerability affects users who have email proxy enabled and are utilizing the scanning feature. Attackers can exploit this vulnerability through repeated attacks over a few minutes, leading to a race condition that allows arbitrary commands to be executed with root privileges without authentication.

The Common Vulnerability Scoring System (CVSSv4.0) assigns a base score of 9.2 to this vulnerability, categorizing it as Critical, the highest severity level.

All versions of the product are affected by this vulnerability. Despite the availability of a fix, users must manually apply the patch since automatic updates will not be provided due to the end of support for the product.

The company has urged users utilizing email protection features to apply the patch immediately and is also encouraging migration to Sophos Firewall, which continues to receive support.

## This story in other languages

- [Français](https://www.dataloco.com/fr/vulnerabilite-rce-critique-dans-sophos-utm)
- [Italiano](https://www.dataloco.com/it/scoperta-una-grave-vulnerabilita-rce-in-sophos-utm)
- [Nederlands](https://www.dataloco.com/nl/sophos-utm-heeft-ernstige-rce-kwetsbaarheid-ontdekt)
- [Português (Brasil)](https://www.dataloco.com/pt-br/sophos-utm-apresenta-vulnerabilidade-critica-de-rce)