CVE-2026-118633

LOWCVSS 9.2 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A path traversal vulnerability allows a remote unauthenticated attacker to execute arbitrary code as root in Sophos UTM (all versions) after winning a race condition by sustaining repeated attacks for a few minutes when the email proxy is used with scanning enabled. Sophos UTM is end-of-life and the patch must be installed manually.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-35

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Peaked 1d ago at 1 mentions (2026-10-28); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-10-28: 1Mentions · 2026-10-29: 110-2810-29
Referenced assets11 URLs
Full discourse2 posts
  • 테크워처@TheHour2359

    출처 - Jenkins — 2026년 10월 28일 보안 권고 https://www.jenkins.io/security/advisory/2026-10-28/ - Juniper — Session Smart Router·Conductor 보안 권고 JSA112183 https://supportportal.juniper.net/s/article/2026-10-On-Demand-Security-Bulletin-Session-Smart-Router-and-Session-Smart-Conductor-Multiple-internally-discovered-vulnerabilities-resolved - Sophos — CVE-2026-118633 https://www.sophos.com/en-us/security-advisories/sophos-sa-20261028-utm-rce - WordPress — 7.1.4 보안 릴리스 https://wordpress.org/news/2026/10/wordpress-7-1-4/ 실제 악용 취약점 및 종합 자료 - CISA — Known Exploited Vulnerabilities Catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog - http://pwn.watch — 보안 취약점·사고 모니터링 https://pwn.watch/ - http://pwn.watch — Jenkins 보안 권고 요약 https://pwn.watch/i/jenkins-core-security-advisory-2026-10-28 - http://pwn.watch — Juniper 취약점 요약 https://pwn.watch/i/juniper-session-smart-router-cve-2026-103409 - http://pwn.watch — Sophos UTM 취약점 요약 https://pwn.watch/i/sophos-utm-email-proxy-preauth-rce-cve-2026-118633

    0000042
    2.1K followersView on X
  • Severity Daily@severitydaily

    Sophos shipped UTM certificate fixes through Up2Date last week. The pre-auth root RCE it disclosed today has to be installed by hand — UTM has been end of life since June. No exploitation reported. https://severitydaily.com/sophos-utm-cve-2026-118633-pre-auth-root-rce-email-proxy-manual-patch-up2date-myutm-offline/

    0000035
    32 followersView on X

Explore more