CVE-2026-34800
MediumCVSS 6.4Exploitation Probability (EPSS)
Low risk6th percentile - higher than 6% of all known CVEs
Summary
Endian Firewall version 3.3.25 and prior contains a stored XSS vulnerability via the NAME parameter in /cgi-bin/uplinkeditor.cgi. An authenticated attacker can inject arbitrary JavaScript that is stored and executed when other users view the affected page.
Risk Assessment
An attacker can hijack sessions of other administrators, steal data, or perform unauthorized actions in the firewall management panel.
Recommendation
Update Endian Firewall to the latest version that fixes this vulnerability. Restrict access to the admin panel to trusted users only.
Other vulnerabilities in Endian Firewall
See all- CVE-2015-5082High
Endian Firewall before 3.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the NEW_PASSWORD_1 or NEW_PASSWORD_2 parameter to cgi-bin/chpasswd.cgi.
- CVE-2026-34823Medium
Endian Firewall version 3.3.25 and prior contain a stored XSS vulnerability via the remark parameter in /manage/password/web/. An authenticated attacker can inject arbitrary JavaScript.
- CVE-2026-34822Medium
Endian Firewall version 3.3.25 and prior have a stored cross-site scripting (XSS) vulnerability via the new_cert_name parameter in /manage/ca/certificate/. An authenticated attacker can inject arbitrary JavaScript that is stored and executed when other users view the page.
- CVE-2026-34821Medium
Endian Firewall version 3.3.25 and prior contains a stored XSS vulnerability via the remark parameter in /manage/vpnauthentication/user/. An authenticated attacker can inject arbitrary JavaScript that executes when other users view the page.
- CVE-2026-34820Medium
Endian Firewall version 3.3.25 and prior contain a stored XSS vulnerability via the remark parameter in /manage/ipsec/. An authenticated attacker can inject arbitrary JavaScript that is stored and executed when other users view the page.
- CVE-2026-34819Medium
Endian Firewall version 3.3.25 and prior contain a stored XSS vulnerability via the REMARK parameter in /cgi-bin/openvpnclient.cgi. An authenticated attacker can inject arbitrary JavaScript that is stored and executed when other users view the affected page.
- CVE-2026-34818Medium
Endian Firewall version 3.3.25 and prior contain a stored XSS vulnerability via the remark parameter in /manage/dnsmasq/localdomains/. An authenticated attacker can inject arbitrary JavaScript that is stored and executed when other users view the page.
- CVE-2026-34817Medium
Endian Firewall version 3.3.25 and prior contain a stored XSS vulnerability via the ADDRESS BCC parameter in /cgi-bin/smtprouting.cgi. An authenticated attacker can inject arbitrary JavaScript that is stored and executed when other users view the page.
- CVE-2026-34816Medium
Endian Firewall version 3.3.25 and prior contain a stored XSS vulnerability via the domain parameter in /manage/smtpscan/domainrouting/. An authenticated attacker can inject arbitrary JavaScript that is stored and executed when other users view the page.
- CVE-2026-34815Medium
Endian Firewall version 3.3.25 and prior contain a stored XSS vulnerability via the DOMAIN parameter in /cgi-bin/smtpdomains.cgi. An authenticated attacker can inject arbitrary JavaScript that is stored and executed when other users view the page.
Original NVD description (English source)
Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the NAME parameter to /cgi-bin/uplinkeditor.cgi. An authenticated attacker can inject arbitrary JavaScript that is stored and executed when other users view the affected page.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS