Skip to content
COOEY

FAIL › dossier

CyberoamOS

PRODUCT

· dossier confidence 0%

CyberoamOS is a network security operating system that suffered a critical, unpatched SQL injection vulnerability allowing remote code execution without authentication, severely compromising its security posture and exposing administrative interfaces to unauthorized access.

Failure events
2
Zero-days
0
RCEs
1
On KEV
1
Critical
1
Worst shame
72
PROFILE
CategorycybersecurityWhat they doCyberoamOS is a network security operating system used in Cyberoam firewalls and security appliances.
SECURITY POSTURE

The security posture is compromised by a critical, unpatched SQL injection vulnerability that allowed remote code execution without authentication, indicating a severe lack of input validation and access control in the WebAdmin interface.

Notable failures
  • CVE-2020-29574: Remote SQL injection RCE in WebAdmin
  • CVE-2020-29574: Unauthenticated SQL injection allowing unauthorized execution
Patterns: unpatched SQL injection vulnerabilities; lack of authentication on administrative interfaces
FAILURE HISTORY · 2
DATEEVENTSEVSUMMARY
2025-02-06 CVE-2020-29574 high Sophos's CyberoamOS had a remotely exploitable SQL injection vulnerability allowing unauthorized SQL execution without authentication.
2020-12-11 CVE-2020-29574 critical CVE-2020-29574: An SQL injection vulnerability in the WebAdmin of Cyberoam OS through 2020-12-04
DOSSIER SOURCES
Open questions: What is the current patch status for CVE-2020-29574? · Are there other unpatched vulnerabilities in CyberoamOS?
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-09-04 03:49:41.455268+00:00