PatchTheCVE: cyberoam oshttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2014-5503: SQL injection vulnerability in the Guest Login Portal in the Sophos Cyberoam appliances with CyberoamOS beforehttps://patchthecve.com/cve/CVE-2014-5503.htmlhttps://patchthecve.com/cve/CVE-2014-5503.htmlWed, 17 Jun 2026 00:11:37 +0000HIGH 10.0: SQL injection vulnerability in the Guest Login Portal in the Sophos Cyberoam appliances with CyberoamOS before 10.6.1 GA allows remote attackers to execute arbitrary SQL commands via the add_guest_user opcode.CVE-2014-5502: The Sophos Cyberoam appliances with CyberoamOS before 10.6.1 GA allows remote authenticated users to inject arhttps://patchthecve.com/cve/CVE-2014-5502.htmlhttps://patchthecve.com/cve/CVE-2014-5502.htmlWed, 17 Jun 2026 00:11:37 +0000HIGH 9.0: The Sophos Cyberoam appliances with CyberoamOS before 10.6.1 GA allows remote authenticated users to inject arbitrary commands via a (1) checkcert_key, (2) webclient_portal_settings, (3) sslvpn_liveuser_delete, or (4) ccc_flush_sql_file opcode.CVE-2014-5501: Stack-based buffer overflow in the diagnose service in the Sophos Cyberoam appliances with CyberoamOS before 1https://patchthecve.com/cve/CVE-2014-5501.htmlhttps://patchthecve.com/cve/CVE-2014-5501.htmlWed, 17 Jun 2026 00:11:37 +0000HIGH 9.3: Stack-based buffer overflow in the diagnose service in the Sophos Cyberoam appliances with CyberoamOS before 10.6.1 GA allows remote attackers to execute arbitrary code via a crafted webpage or file.