CVE-2026-34814

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting XSS via the group parameter to /cgi-bin/proxygroup.cgi. An authenticated attacker can inject arbitrary JavaScript that is stored and executed when other users view the affected page...

CVE-2026-34814

CVE-2026-34814 affects Endian Firewall up to version 3.3.25. The vulnerability is a stored XSS via the group parameter to /cgi-bin/proxygroup.cgi, allowing an authenticated attacker to inject JavaScript that is later executed when other users view the affected page. The reported impact includes p...