CVE-2026-34802: medium-severity vulnerability in Endian Firewall
Endian Firewall /cgi-bin/salearn.cgi remark user ham spam Stored Cross-Site Scripting
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.1epss 0.2%
Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark user ham spam parameter to /cgi-bin/salearn.cgi. An authenticated attacker can inject arbitrary JavaScript that is stored and executed when other users view the affected page.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
Affected products
Endian · Endian FirewallRelated CVEs — Endian Firewall
In the same product, most dangerous first.
CVE-2026-34795HIGHEndian Firewall /cgi-bin/logs_log.cgi DATE Perl Command InjectionEPSS 1.5%CVE-2026-34796HIGHEndian Firewall /cgi-bin/logs_openvpn.cgi DATE Perl Command InjectionEPSS 1.5%CVE-2026-34792HIGHEndian Firewall /cgi-bin/logs_clamav.cgi DATE Perl Command InjectionEPSS 1.3%CVE-2026-34791HIGHEndian Firewall /cgi-bin/logs_proxy.cgi DATE Perl Command InjectionEPSS 1.3%CVE-2026-34797HIGHEndian Firewall /cgi-bin/logs_smtp.cgi DATE Perl Command InjectionEPSS 1.3%CVE-2026-34793HIGHEndian Firewall /cgi-bin/logs_firewall.cgi DATE Perl Command InjectionEPSS 1.3%