Sophos Authenticator — known CVE vulnerabilities

Every CVE whose affected-product data names Sophos Authenticator, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2021-25266 — CVSS 3.9 (low): An insecure data storage vulnerability allows a physical attacker with root privileges to retrieve TOTP secret keys from unlocked phones in…