EIP-2026-103007

This exploit demonstrates a privilege escalation vulnerability in Sophos UTM 9 by replaying network traffic to obtain a session ID (SID) from the confd service, allowing an attacker to escalate privileges to root.