CISA Urges Federal Agencies to Patch Sophos Web Appliance Vulnerability Exploited in the Wild

CISA has added a critical pre-auth command injection vulnerability in Sophos Web Appliance to its Known Exploited Vulnerabilities catalog, which was patched by the company in April 2023.