CVE-2025-7382

creationtimestamp| type| source ---|---|--- 2025-07-22 13:48:46+00:00| seen| https://poliverso.org/objects/0477a01e-605c14d2-887a4e63c671f474 2025-07-23 03:45:08+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lum46iuol22j 2025-07-24 04:33:21+00:00| seen|...

CVE-2025-7382

A command injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR2 21.0.2 can lead to adjacent attackers achieving pre-auth code execution on High Availability HA auxiliary devices, if OTP authentication for the admin user is enabled...