https://www.systemtek.co.uk/2020/04/sophos-xg-sql-injection-vulnerability-and-malicious-code-execution/
Sophos XG - SQL injection vulnerability and malicious code execution