CVE-2026-34796: high-severity vulnerability in Endian Firewall
Endian Firewall /cgi-bin/logs_openvpn.cgi DATE Perl Command Injection
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.7epss 1.5%
Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_openvpn.cgi. The DATE parameter value is used to construct a file path that is passed to a Perl open() call, which allows command injection due to an incomplete regular expression validation.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Endian · Endian FirewallRelated CVEs — Endian Firewall
In the same product, most dangerous first.
CVE-2026-34795HIGHEndian Firewall /cgi-bin/logs_log.cgi DATE Perl Command InjectionEPSS 1.5%CVE-2026-34792HIGHEndian Firewall /cgi-bin/logs_clamav.cgi DATE Perl Command InjectionEPSS 1.3%CVE-2026-34791HIGHEndian Firewall /cgi-bin/logs_proxy.cgi DATE Perl Command InjectionEPSS 1.3%CVE-2026-34797HIGHEndian Firewall /cgi-bin/logs_smtp.cgi DATE Perl Command InjectionEPSS 1.3%CVE-2026-34793HIGHEndian Firewall /cgi-bin/logs_firewall.cgi DATE Perl Command InjectionEPSS 1.3%CVE-2026-34794HIGHEndian Firewall /cgi-bin/logs_ids.cgi DATE Perl Command InjectionEPSS 1.2%