← All advisories

High severity8.8NVD Advisory· Published Mar 22, 2021· Updated Jun 17, 2026

CVE-2021-25265

CVE-2021-25265

Description

A malicious website could execute code remotely in Sophos Connect Client before version 2.1.

Affected products

3

Sophos/Connect3 versions
cpe:2.3:a:sophos:connect:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:sophos:connect:*:*:*:*:*:*:*:*range: <2.1
- (no CPE)range: <2.1
- (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

2

community.sophos.com/b/security-blog/posts/resolved-rce-in-sophos-connect-client-for-windows-cve-2021-25265nvdPatchVendor Advisory
community.sophos.com/b/security-blognvdVendor Advisory

News mentions

0

No linked articles in our index yet.