CVE-2025-7624
An SQL injection vulnerability in the legacy (transparent) SMTP proxy of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to remote code execution, if a quarantining policy is active for Email and SFOS was upgraded from a version older than 21.0 GA.
Vendor
Product
CWE
Yayın Tarihi
2025-07-21 14:15:30
Güncelleme
2025-11-17 16:13:07
Source Identifier
security-alert@sophos.com
KEV Date Added
-