PatchTheCVE: cyberoamoshttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2020-29574: CyberoamOS (CROS) SQL Injection Vulnerabilityhttps://patchthecve.com/cve/CVE-2020-29574.htmlhttps://patchthecve.com/cve/CVE-2020-29574.htmlSat, 15 Aug 2026 04:17:56 +0000CRITICAL 9.8: An SQL injection vulnerability in the WebAdmin of Cyberoam OS through 2020-12-04 allows unauthenticated attackers to execute arbitrary SQL statements remotely.CVE-2019-17059: A shell injection vulnerability on the Sophos Cyberoam firewall appliance with CyberoamOS before 10.6.6 MR-6 ahttps://patchthecve.com/cve/CVE-2019-17059.htmlhttps://patchthecve.com/cve/CVE-2019-17059.htmlWed, 17 Jun 2026 02:23:14 +0000CRITICAL 9.8: A shell injection vulnerability on the Sophos Cyberoam firewall appliance with CyberoamOS before 10.6.6 MR-6 allows remote attackers to execute arbitrary commands via the Web Admin and SSL VPN consoles.CVE-2015-6811: SQL injection vulnerability in the Sophos Cyberoam CR500iNG-XP firewall appliance with CyberoamOS 10.6.2 MR-1 https://patchthecve.com/cve/CVE-2015-6811.htmlhttps://patchthecve.com/cve/CVE-2015-6811.htmlWed, 17 Jun 2026 00:31:27 +0000HIGH 7.5: SQL injection vulnerability in the Sophos Cyberoam CR500iNG-XP firewall appliance with CyberoamOS 10.6.2 MR-1 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter to login.xml.