CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

EUVD•added 2026/04/02 3:31 p.m.•1 views

EUVD-2026-18320

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting XSS via the REMARK parameter to /cgi-bin/openvpnclient.cgi. An authenticated attacker can inject arbitrary JavaScript that is stored and executed when other users view the affected page...

6.4CVSS5.9AI score0.00011EPSS

Exploits0References3

NVD•added 2026/04/02 3:16 p.m.•1 views

CVE-2026-34819

6.4CVSS0.00011EPSS

Exploits0References2

CVE•added 2026/04/02 2:46 p.m.•4 views

CVE-2026-34819

Endian Firewall is affected by CVE-2026-34819: versions 3.3.25 and earlier are vulnerable to stored XSS via the REMARK parameter in /cgi-bin/openvpnclient.cgi. An authenticated attacker can inject arbitrary JavaScript that is stored and executed when other users view the affected page. This is ca...

6.4CVSS5.9AI score0.00011EPSS

Exploits0References2Affected Software1