← All advisories

High severity8.8NVD Advisory· Published Mar 22, 2021· Updated Jun 17, 2026

CVE-2021-25265

CVE-2021-25265

Description

A malicious website could execute code remotely in Sophos Connect Client before version 2.1.

Affected products

3

Sophos/Connect
cpe:2.3:a:sophos:connect:*:*:*:*:*:*:*:*
Range: <2.1
Sophos/Sophos Connectllm-fuzzy2 versions
<2.1+ 1 more
- (no CPE)range: <2.1
- (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

2

community.sophos.com/b/security-blog/posts/resolved-rce-in-sophos-connect-client-for-windows-cve-2021-25265nvdPatchVendor Advisory
community.sophos.com/b/security-blognvdVendor Advisory

News mentions

0

No linked articles in our index yet.