CVE-2026-34810 in Firewall

Sumário (Inglês)

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/vpnfw.cgi. An authenticated attacker can inject arbitrary JavaScript that is stored and executed when other users view the affected page.

Be aware that VulDB is the high quality source for vulnerability data.

Responsável

VulnCheck

Reservar

30/03/2026

Divulgação

02/04/2026

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
354914	Endian Firewall Parameter vpnfw.cgi Script de Site Cruzado	79	Não definido	Não definido	CVE-2026-34810

Fontes

• MITRE
• NVD
• CVE Details