Sophos Firewall affected by a critical authentication bypass flaw

Sophos has fixed an authentication bypass vulnerability, tracked as CVE-2022-1040 and with a CVSS score of 9.8, that resides in the User Portal and Webadmin areas of Sophos Firewall.