CVE-2025-7624

Critical · 9.8

CVSS

9.8

EPSS

10.5%

Published

Jul 21, 2025

CISA due date

—

The record

An SQL injection vulnerability in the legacy (transparent) SMTP proxy of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to remote code execution, if a quarantining policy is active for Email and SFOS was upgraded from a version older than 21.0 GA.

Affected packages

Ecosystem	Package	Introduced	Fixed