CVE-2025-7624

🗓️ 21 Jul 2025 13:24:37Reported by SophosType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 101 Views

SQL injection in Sophos Firewall can cause remote code execution if Email quarantining is active.

Reporter	Title	Published	Views	Family All 13
BDU FSTEC	The vulnerability of the SMTP proxy network interface component of Sophos Firewall (formerly Sophos XG Firewall) allows a hacker to execute arbitrary code.	17 Nov 202500:00	–	bdu_fstec
Circl	CVE-2025-7624	22 Jul 202500:40	–	circl
CNNVD	Sophos Firewall 安全漏洞	21 Jul 202500:00	–	cnnvd
Cvelist	CVE-2025-7624	21 Jul 202513:24	–	cvelist
EUVD	EUVD-2025-22085	3 Oct 202520:07	–	euvd
NVD	CVE-2025-7624	21 Jul 202514:15	–	nvd
OSV	CVE-2025-7624	21 Jul 202514:15	–	osv
Positive Technologies	PT-2025-30273 · Sophos · Sophos Firewall	21 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-7624	23 Jul 202514:31	–	redhatcve
The Hacker News	Sophos and SonicWall Patch Critical RCE Flaws Affecting Firewalls and SMA 100 Devices	24 Jul 202514:14	–	thn

NVD

Node

AND

sophos firewall_firmwareRange<21.0.2

sophos firewallMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "Sophos Firewall",
    "vendor": "Sophos",
    "versions": [
      {
        "lessThan": "21.0 MR2 (21.0.2)",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
sophos	www.sophos.com/en-us/security-advisories/sophos-sa-20250721-sfos-rce

17 Jun 2026 10:05Current

8High risk

Vulners AI Score8

CVSS 3.19.8

EPSS0.07241

SSVC

CWE-89