Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Smoothwall Express — community.smoothwall.org/forum/viewtopic.php?t=45095 Clear all filters
TI-2026-21301 CVE-2026-26352 · GHSA-7455-x3qx-74xc

Smoothwall Express < 3.1 Update 13 Stored XSS in vpnmain.cgi via VPN_IP Parameter

Priority LOW 22

Smoothwall Express versions prior to 3.1 Update 13 contain a stored cross-site scripting vulnerability in the /cgi-bin/vpnmain.cgi script due to improper sanitation of the VPN_IP parameter.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00143 Published 2026-03-30 Fixed in 3.1 Update 13 CWE-79