Login Request a demo
FF
Product
Firewall Firmware
by Sophos · last CVE Jul 21, 2025
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 4High 6Medium 0Low 0
Severity
All severities10Critical4High6Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Firewall Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-7624
9.8
11%
Jul 21
An SQL injection vulnerability in the legacy (transparent) SMTP proxy of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to remote code execution, if a quarantining…
Affected: before 21.0.2
CVE-2025-6704
9.8
12%
Jul 21
An arbitrary file writing vulnerability in the Secure PDF eXchange (SPX) feature of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to pre-auth remote code…
Affected: before 21.0.2
CVE-2024-12728
9.8
1%
Dec 19
A weak credentials vulnerability potentially allows privileged system access via SSH to Sophos Firewall older than version 20.0 MR3 (20.0.3)
Affected: before 20.0.3
CVE-2024-12727
9.8
1%
Dec 19
A pre-auth SQL injection vulnerability in the email protection feature of Sophos Firewall versions older than 21.0 MR1 (21.0.1) allows access to the reporting database and can…
Affected: before 21.0.1
Showing 4