The current version of Sophos Firewall (SFOS) is 22.0 (as of 26/07/2026). patchletter checks the official source daily and emails you new releases.
Actively exploited vulnerabilities
The US cybersecurity agency CISA lists these vulnerabilities in its catalog of Known Exploited Vulnerabilities. What CISA does not carry does not appear in this list — even where it is being exploited.
- CVE-2022-1040Sophos Firewall Authentication Bypass Vulnerability
9.8 critical · over the network, without login · CISA deadline was 21 Apr 22
- CVE-2022-3236Sophos Firewall Code Injection Vulnerability
9.8 critical · over the network, without login · CISA deadline was 14 Oct 22
- CVE-2020-15069Sophos XG Firewall Buffer Overflow Vulnerability
9.8 critical · over the network, without login · CISA deadline was 27 Feb 25
Source: CISA KEV. The CVE is matched to the product automatically — when in doubt, the linked NVD entry applies.
Sophos Firewall (SFOS) at a glance
Sophos Firewall OS (SFOS) is the operating system on Sophos XG/XGS firewalls, common in SMBs and mid-market. Sophos ships SFOS releases plus hotfixes and security advisories; as a perimeter device, timely patching is essential — Sophos firewalls have been the target of actively exploited flaws.
For admins the perimeter rules apply, sharpened: never expose the admin or VPN portal to the WAN unprotected, and apply hotfixes promptly (Sophos can push some automatically — keep that enabled). Take a config backup before firmware changes, mind the order on HA pairs, and verify VPN and rules afterwards. Track the SFOS version and its support window per model. Subscribe to Sophos advisories; patchletter surfaces new SFOS builds so critical updates aren't missed.
Support cycles (endoflife.date)
| Cycle | Latest version | Status |
|---|---|---|
| 19.5 | – | End of Life |
| 19.0 | – | End of Life |
| 18.5 | – | End of Life |
Version history & changelog · as detected by patchletter
| Version | Channel | Date | Notes |
|---|---|---|---|
| 22.0 | STABLE | 26/07/2026 | Release notes → |
Frequently asked questions
- What is the latest version of Sophos Firewall (SFOS)?
- Sophos Firewall (SFOS) 22.0, released 26/07/2026. patchletter checks the vendor's official source daily for new releases.
- Where can I find the Sophos Firewall (SFOS) release notes?
- The version history above links to the vendor's official release notes where the vendor publishes them. patchletter deliberately stores no vendor full texts.
- How do I get notified about new Sophos Firewall (SFOS) updates?
- Tick Sophos Firewall (SFOS) off in the catalogue and leave your address. From then on new versions go out by email — one at a time, or bundled in the daily or weekly digest.
An email as soon as a new Sophos Firewall (SFOS) version ships
We reconcile the vendor source daily. When a new version appears, it lands in your inbox right away or bundled as a digest. The update email is free and ends with one click. Alerts about vulnerabilities and end of support are part of patchletter Pro.
Embed this badge
The badge shows the current Sophos Firewall (SFOS) version and keeps it up to date. Anyone may embed it, no account needed.
[](https://patchletter.com/en/software/sophos-sfos)https://patchletter.com/badge/sophos-sfos.svgAlso available: ?v=eol (end of support) and ?v=cve (actively exploited).
