CVE-2026-34790highCWE-22

CVE-2026-34790: high-severity vulnerability in Endian Firewall

Endian Firewall /cgi-bin/backup.cgi remove ARCHIVE Directory Traversal

Published · Updated

Follow this CVE+ Monitor Endian Firewall

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.1epss 0.7%
Endian Firewall version 3.3.25 and prior allow authenticated users to delete arbitrary files via directory traversal in the remove ARCHIVE parameter to /cgi-bin/backup.cgi. The remove ARCHIVE parameter value is used to construct a file path without sanitization of directory traversal sequences, which is then passed to an unlink() call.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N
Affected products
Endian · Endian Firewall
Related CVEs — Endian Firewall

In the same product, most dangerous first.

CVE-2026-34795HIGHEndian Firewall /cgi-bin/logs_log.cgi DATE Perl Command InjectionEPSS 1.5%CVE-2026-34796HIGHEndian Firewall /cgi-bin/logs_openvpn.cgi DATE Perl Command InjectionEPSS 1.5%CVE-2026-34792HIGHEndian Firewall /cgi-bin/logs_clamav.cgi DATE Perl Command InjectionEPSS 1.3%CVE-2026-34791HIGHEndian Firewall /cgi-bin/logs_proxy.cgi DATE Perl Command InjectionEPSS 1.3%CVE-2026-34797HIGHEndian Firewall /cgi-bin/logs_smtp.cgi DATE Perl Command InjectionEPSS 1.3%CVE-2026-34793HIGHEndian Firewall /cgi-bin/logs_firewall.cgi DATE Perl Command InjectionEPSS 1.3%