Endian

Records37All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

Endian records in CISA KEV

No Endian vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Firewall Community 35 records MEDIUM Firewall 2 records LOW

Records

37 records

TI-2026-27040 CVE-2026-34796 · GHSA-4qwj-j599-qqw3

Endian Firewall /cgi-bin/logs_openvpn.cgi DATE Perl Command Injection

MEDIUM 43

Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_openvpn.cgi.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01492 Published 2026-04-02 No fix listed CWE-78

TI-2026-27039 CVE-2026-34795 · GHSA-89fh-vj32-9xrm

Endian Firewall /cgi-bin/logs_log.cgi DATE Perl Command Injection

MEDIUM 43

Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_log.cgi.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01495 Published 2026-04-02 No fix listed CWE-78

TI-2021-08747 CVE-2021-27201 · GHSA-v5rr-334g-rqm6

Endian Firewall Community (aka EFW) 3.3.2 allows remote authenticated users to execute…

MEDIUM 43

Endian Firewall Community (aka EFW) 3.3.2 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in a backup comment.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02606 Published 2021-02-15 No fix listed CWE-78

TI-2026-27041 CVE-2026-34797 · GHSA-c2cq-vr56-2568

Endian Firewall /cgi-bin/logs_smtp.cgi DATE Perl Command Injection

MEDIUM 42

Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_smtp.cgi.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0127 Published 2026-04-02 No fix listed CWE-78

TI-2026-27038 CVE-2026-34794 · GHSA-m82g-g4wp-pm4m

Endian Firewall /cgi-bin/logs_ids.cgi DATE Perl Command Injection

MEDIUM 42

Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_ids.cgi.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01244 Published 2026-04-02 No fix listed CWE-78

TI-2026-27037 CVE-2026-34793 · GHSA-5jfv-qcjp-c354

Endian Firewall /cgi-bin/logs_firewall.cgi DATE Perl Command Injection

MEDIUM 42

Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_firewall.cgi.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0127 Published 2026-04-02 No fix listed CWE-78

TI-2026-27036 CVE-2026-34792 · GHSA-3pjf-h669-775r

Endian Firewall /cgi-bin/logs_clamav.cgi DATE Perl Command Injection

MEDIUM 42

Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_clamav.cgi.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01294 Published 2026-04-02 No fix listed CWE-78

TI-2026-27035 CVE-2026-34791 · GHSA-hwww-mh59-5rf2

Endian Firewall /cgi-bin/logs_proxy.cgi DATE Perl Command Injection

MEDIUM 42

Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_proxy.cgi.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01294 Published 2026-04-02 No fix listed CWE-78

TI-2026-27034 CVE-2026-34790 · GHSA-757j-pp37-wg8v

Endian Firewall /cgi-bin/backup.cgi remove ARCHIVE Directory Traversal

LOW 32

Endian Firewall version 3.3.25 and prior allow authenticated users to delete arbitrary files via directory traversal in the remove ARCHIVE parameter to /cgi-bin/backup.cgi.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00653 Published 2026-04-02 No fix listed CWE-22

TI-2012-04161 CVE-2012-4923 · GHSA-h52g-q5hf-3234

Multiple cross-site scripting (XSS) vulnerabilities in Endian Firewall 2.4 allow remote…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in Endian Firewall 2.4 allow remote attackers to inject arbitrary web script or HTML via the (1) createrule parameter to dnat.cgi, (2) addrule parameter to dansguardian…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01828 Published 2012-09-15 No fix listed CWE-79

TI-2026-27051 CVE-2026-34807 · GHSA-259x-xg45-mf97

Endian Firewall /cgi-bin/incoming.cgi remark Stored Cross-Site Scripting

LOW 23

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/incoming.cgi.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00213 Published 2026-04-02 No fix listed CWE-79

TI-2026-27045 CVE-2026-34801 · GHSA-v8jp-3x6j-r7jf

Endian Firewall /manage/dhcp/fixed_leases/ remark Stored Cross-Site Scripting

LOW 23

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /manage/dhcp/fixed_leases/.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00213 Published 2026-04-02 No fix listed CWE-79

TI-2026-27067 CVE-2026-34823 · GHSA-c555-qwvr-3579

Endian Firewall /manage/password/web/ remark Stored Cross-Site Scripting

LOW 22

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /manage/password/web/.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00143 Published 2026-04-02 No fix listed CWE-79

TI-2026-27066 CVE-2026-34822 · GHSA-6c3w-vc43-gphg

Endian Firewall /manage/ca/certificate/ new_cert_name Stored Cross-Site Scripting

LOW 22

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the new_cert_name parameter to /manage/ca/certificate/.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00096 Published 2026-04-02 No fix listed CWE-79

TI-2026-27065 CVE-2026-34821 · GHSA-qxfx-cg86-j76f

Endian Firewall /manage/vpnauthentication/user/ remark Stored Cross-Site Scripting

LOW 22

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /manage/vpnauthentication/user/.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00164 Published 2026-04-02 No fix listed CWE-79

TI-2026-27064 CVE-2026-34820 · GHSA-3fmq-wjgh-4f33

Endian Firewall /manage/ipsec/ remark Stored Cross-Site Scripting

LOW 22

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /manage/ipsec/.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00143 Published 2026-04-02 No fix listed CWE-79

TI-2026-27063 CVE-2026-34819 · GHSA-h6h2-h2qj-ww49

Endian Firewall /cgi-bin/openvpnclient.cgi REMARK Stored Cross-Site Scripting

LOW 22

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the REMARK parameter to /cgi-bin/openvpnclient.cgi.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00186 Published 2026-04-02 No fix listed CWE-79

TI-2026-27062 CVE-2026-34818 · GHSA-984w-4xfg-wgqw

Endian Firewall /manage/dnsmasq/localdomains/ remark Stored Cross-Site Scripting

LOW 22

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /manage/dnsmasq/localdomains/.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00143 Published 2026-04-02 No fix listed CWE-79

TI-2026-27061 CVE-2026-34817 · GHSA-4v6q-2pvx-f85v

Endian Firewall /cgi-bin/smtprouting.cgi ADDRESS BCC Stored Cross-Site Scripting

LOW 22

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the ADDRESS BCC parameter to /cgi-bin/smtprouting.cgi.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00143 Published 2026-04-02 No fix listed CWE-79

TI-2026-27060 CVE-2026-34816 · GHSA-jgpv-x984-755x

Endian Firewall /manage/smtpscan/domainrouting/ domain Stored Cross-Site Scripting

LOW 22

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the domain parameter to /manage/smtpscan/domainrouting/.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00143 Published 2026-04-02 No fix listed CWE-79

TI-2026-27059 CVE-2026-34815 · GHSA-fmq2-gvrj-w58w

Endian Firewall /cgi-bin/smtpdomains.cgi DOMAIN Stored Cross-Site Scripting

LOW 22

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the DOMAIN parameter to /cgi-bin/smtpdomains.cgi.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00143 Published 2026-04-02 No fix listed CWE-79

TI-2026-27058 CVE-2026-34814 · GHSA-x6hh-28rh-8738

Endian Firewall /cgi-bin/proxygroup.cgi group Stored Cross-Site Scripting

LOW 22

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the group parameter to /cgi-bin/proxygroup.cgi.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00143 Published 2026-04-02 No fix listed CWE-79

TI-2026-27057 CVE-2026-34813 · GHSA-c849-x89h-q96v

Endian Firewall /cgi-bin/proxyuser.cgi user Stored Cross-Site Scripting

LOW 22

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the user parameter to /cgi-bin/proxyuser.cgi.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.0018 Published 2026-04-02 No fix listed CWE-79

TI-2026-27056 CVE-2026-34812 · GHSA-3frm-ppcq-w9fx

Endian Firewall /cgi-bin/proxypolicy.cgi mimetypes Stored Cross-Site Scripting

LOW 22

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the mimetypes parameter to /cgi-bin/proxypolicy.cgi.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00143 Published 2026-04-02 No fix listed CWE-79

TI-2026-27055 CVE-2026-34811 · GHSA-jh32-cjg2-jpqq

Endian Firewall /cgi-bin/xtaccess.cgi remark Stored Cross-Site Scripting

LOW 22

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/xtaccess.cgi.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00143 Published 2026-04-02 No fix listed CWE-79

Open these records in search →

Critical	0
High	9
Medium	28
Low	0
No CVSS	0