Vulnerabilities

TI-2026-27067 CVE-2026-34823 · GHSA-c555-qwvr-3579

Endian Firewall /manage/password/web/ remark Stored Cross-Site Scripting

LOW 22

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /manage/password/web/.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00143 Published 2026-04-02 No fix listed CWE-79

TI-2026-27066 CVE-2026-34822 · GHSA-6c3w-vc43-gphg

Endian Firewall /manage/ca/certificate/ new_cert_name Stored Cross-Site Scripting

LOW 22

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the new_cert_name parameter to /manage/ca/certificate/.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00096 Published 2026-04-02 No fix listed CWE-79

TI-2026-27065 CVE-2026-34821 · GHSA-qxfx-cg86-j76f

Endian Firewall /manage/vpnauthentication/user/ remark Stored Cross-Site Scripting

LOW 22

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /manage/vpnauthentication/user/.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00164 Published 2026-04-02 No fix listed CWE-79

TI-2026-27064 CVE-2026-34820 · GHSA-3fmq-wjgh-4f33

Endian Firewall /manage/ipsec/ remark Stored Cross-Site Scripting

LOW 22

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /manage/ipsec/.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00143 Published 2026-04-02 No fix listed CWE-79

TI-2026-27063 CVE-2026-34819 · GHSA-h6h2-h2qj-ww49

Endian Firewall /cgi-bin/openvpnclient.cgi REMARK Stored Cross-Site Scripting

LOW 22

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the REMARK parameter to /cgi-bin/openvpnclient.cgi.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00186 Published 2026-04-02 No fix listed CWE-79

TI-2026-27062 CVE-2026-34818 · GHSA-984w-4xfg-wgqw

Endian Firewall /manage/dnsmasq/localdomains/ remark Stored Cross-Site Scripting

LOW 22

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /manage/dnsmasq/localdomains/.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00143 Published 2026-04-02 No fix listed CWE-79

TI-2026-27061 CVE-2026-34817 · GHSA-4v6q-2pvx-f85v

Endian Firewall /cgi-bin/smtprouting.cgi ADDRESS BCC Stored Cross-Site Scripting

LOW 22

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the ADDRESS BCC parameter to /cgi-bin/smtprouting.cgi.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00143 Published 2026-04-02 No fix listed CWE-79

TI-2026-27060 CVE-2026-34816 · GHSA-jgpv-x984-755x

Endian Firewall /manage/smtpscan/domainrouting/ domain Stored Cross-Site Scripting

LOW 22

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the domain parameter to /manage/smtpscan/domainrouting/.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00143 Published 2026-04-02 No fix listed CWE-79

TI-2026-27059 CVE-2026-34815 · GHSA-fmq2-gvrj-w58w

Endian Firewall /cgi-bin/smtpdomains.cgi DOMAIN Stored Cross-Site Scripting

LOW 22

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the DOMAIN parameter to /cgi-bin/smtpdomains.cgi.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00143 Published 2026-04-02 No fix listed CWE-79

TI-2026-27058 CVE-2026-34814 · GHSA-x6hh-28rh-8738

Endian Firewall /cgi-bin/proxygroup.cgi group Stored Cross-Site Scripting

LOW 22

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the group parameter to /cgi-bin/proxygroup.cgi.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00143 Published 2026-04-02 No fix listed CWE-79

TI-2026-27057 CVE-2026-34813 · GHSA-c849-x89h-q96v

Endian Firewall /cgi-bin/proxyuser.cgi user Stored Cross-Site Scripting

LOW 22

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the user parameter to /cgi-bin/proxyuser.cgi.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.0018 Published 2026-04-02 No fix listed CWE-79

TI-2026-27056 CVE-2026-34812 · GHSA-3frm-ppcq-w9fx

Endian Firewall /cgi-bin/proxypolicy.cgi mimetypes Stored Cross-Site Scripting

LOW 22

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the mimetypes parameter to /cgi-bin/proxypolicy.cgi.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00143 Published 2026-04-02 No fix listed CWE-79

TI-2026-27055 CVE-2026-34811 · GHSA-jh32-cjg2-jpqq

Endian Firewall /cgi-bin/xtaccess.cgi remark Stored Cross-Site Scripting

LOW 22

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/xtaccess.cgi.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00143 Published 2026-04-02 No fix listed CWE-79

TI-2026-27054 CVE-2026-34810 · GHSA-8x7f-x496-fp9r

Endian Firewall /cgi-bin/vpnfw.cgi remark Stored Cross-Site Scripting

LOW 22

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/vpnfw.cgi.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00143 Published 2026-04-02 No fix listed CWE-79

TI-2026-27053 CVE-2026-34809 · GHSA-pwj2-g679-jwhx

Endian Firewall /cgi-bin/zonefw.cgi remark Stored Cross-Site Scripting

LOW 22

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/zonefw.cgi.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00143 Published 2026-04-02 No fix listed CWE-79

TI-2026-27052 CVE-2026-34808 · GHSA-gjmf-gpwj-9mr2

Endian Firewall /cgi-bin/outgoingfw.cgi remark Stored Cross-Site Scripting

LOW 22

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/outgoingfw.cgi.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00143 Published 2026-04-02 No fix listed CWE-79

TI-2026-27051 CVE-2026-34807 · GHSA-259x-xg45-mf97

Endian Firewall /cgi-bin/incoming.cgi remark Stored Cross-Site Scripting

LOW 23

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/incoming.cgi.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00213 Published 2026-04-02 No fix listed CWE-79

TI-2026-27050 CVE-2026-34806 · GHSA-2c95-2h45-q2j7

Endian Firewall /cgi-bin/snat.cgi remark Stored Cross-Site Scripting

LOW 22

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/snat.cgi.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00175 Published 2026-04-02 No fix listed CWE-79

TI-2026-27049 CVE-2026-34805 · GHSA-424h-wx8h-m36j

Endian Firewall /cgi-bin/dnat.cgi remark Stored Cross-Site Scripting

LOW 22

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/dnat.cgi.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00175 Published 2026-04-02 No fix listed CWE-79

TI-2026-27048 CVE-2026-34804 · GHSA-8vwx-grx5-9rv6

Endian Firewall /manage/qos/rules/ dscp Stored Cross-Site Scripting

LOW 22

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the dscp parameter to /manage/qos/rules/.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00175 Published 2026-04-02 No fix listed CWE-79

TI-2026-27047 CVE-2026-34803 · GHSA-gqf2-xr8q-xjr3

Endian Firewall /manage/qos/classes/ name Stored Cross-Site Scripting

LOW 22

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the name parameter to /manage/qos/classes/.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00175 Published 2026-04-02 No fix listed CWE-79

TI-2026-27046 CVE-2026-34802 · GHSA-p6m2-3qhc-2q84

Endian Firewall /cgi-bin/salearn.cgi remark user ham spam Stored Cross-Site Scripting

LOW 22

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark user ham spam parameter to /cgi-bin/salearn.cgi.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00175 Published 2026-04-02 No fix listed CWE-79

TI-2026-27045 CVE-2026-34801 · GHSA-v8jp-3x6j-r7jf

Endian Firewall /manage/dhcp/fixed_leases/ remark Stored Cross-Site Scripting

LOW 23

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /manage/dhcp/fixed_leases/.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00213 Published 2026-04-02 No fix listed CWE-79

TI-2026-27044 CVE-2026-34800 · GHSA-56cp-r28q-xw7f

Endian Firewall /cgi-bin/uplinkeditor.cgi NAME Stored Cross-Site Scripting

LOW 22

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the NAME parameter to /cgi-bin/uplinkeditor.cgi.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00175 Published 2026-04-02 No fix listed CWE-79

TI-2026-27043 CVE-2026-34799 · GHSA-w4cc-32v2-h2vr

Endian Firewall /manage/dnsmasq/hosts/ remark Stored Cross-Site Scripting

LOW 22

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /manage/dnsmasq/hosts/.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00175 Published 2026-04-02 No fix listed CWE-79

Vulnerabilities

Filters