Sophos and SonicWall have alerted users of critical security flaws in Sophos Firewall and Secure Mobile Access (SMA) 100 Series appliances that could be exploited to achieve remote code execution. 
The two vulnerabilities impacting Sophos Firewall are listed below -

CVE-2025-6704 (CVSS score: 9.8) - An arbitrary file writing vulnerability in the Secure PDF eXchange (SPX) feature can lead



Source: TheHackerNews
Source Link: https://thehackernews.com/2025/07/sophos-and-sonicwall-patch-critical-rce.html