← All advisories

High severity8.8NVD Advisory· Published Nov 26, 2021· Updated Jun 17, 2026

CVE-2021-36807

CVE-2021-36807

Description

An authenticated user could potentially execute code via an SQLi vulnerability in the user portal of SG UTM before version 9.708 MR8.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Sophos/Unified Threat Management Software
cpe:2.3:a:sophos:unified_threat_management_up2date:*:*:*:*:*:*:*:*
Range: <9.708
Sophos/SG UTMllm-fuzzy2 versions
<9.708 MR8+ 1 more
- (no CPE)range: <9.708 MR8
- (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

1

www.sophos.com/en-us/security-advisories/sophos-sa-20211126-sg-sqlinvdVendor Advisory

News mentions

0

No linked articles in our index yet.