CVE-2025-7624

CVSS 3.1: 9.8 critical
EPSS: 8%p95
Published: Jul 21, 2025 · Jul 21, 2025
Modified: Jun 17, 2026

Analyze CVE-2025-7624 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

An SQL injection vulnerability in the legacy (transparent) SMTP proxy of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to remote code execution, if a quarantining policy is active for Email and SFOS was upgraded from a version older than 21.0 GA.

Vendors: sophos

Products: firewall firmware

Weakness: CWE-89

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (8.3%)

In the news

3 stories

⚡ Weekly Recap — SharePoint Breach, Spyware, IoT Hijacks, DPRK Fraud, Crypto Drains and More

The Hacker NewsJul 28, 15:57 UTC · Jul 28, 2025MalwareExploitedCVE-2025-49706 CVE-2025-49704 CVE-2025-20281+271

Sophos and SonicWall Patch Critical RCE Flaws Affecting Firewalls and SMA 100 Devices

The Hacker NewsJul 24, 14:14 UTC · Jul 24, 2025VulnerabilityCVE-2025-6704 CVE-2025-7624 CVE-2025-7382+32 · 1 read

Sophos fixed two critical Sophos Firewall vulnerabilities

Security AffairsJul 23, 20:23 UTC · Jul 23, 2025VulnerabilityCVE-2025-6704 CVE-2025-7624 CVE-2025-7382+23 · 1 read