The advisory document https://support.sophos.com/support/s/article/KB-000044122?language=en_US mentions to rollback the firmware via the GUI. However the appliances are in failsafe and the GUI has not booted. Rollback is only possible via the boot menu/SFLoader.
The article should list these instructions on how to boot an alternative firmware when the GUI is not available.
Thanks,
Matt
