CVE-2022-3236: Official Patch Out Now

Sophos Firewall is affected by a critical code injection vulnerability (CVE-2022-3236) allowing remote code execution if Webadmin/User Portal have WAN access; public proof-of-concept code was briefly available and Sophos has observed limited active exploitation in South Asia. Arctic Wolf and Sophos strongly recommend applying the v19.5 GA patch and disabling WAN access (use VPN or Sophos Central) to mitigate the issue.