Vulners
Lucene search
3 matches found
EUVD-2026-18314
Endian Firewall version 3.3.25 and prior allow stored cross-site scripting XSS via the domain parameter to /manage/smtpscan/domainrouting/. An authenticated attacker can inject arbitrary JavaScript that is stored and executed when other users view the affected page...
6.4CVSS5.9AI score0.00138EPSS
Exploits0References3
CVE-2026-34816
Endian Firewall version 3.3.25 and prior allow stored cross-site scripting XSS via the domain parameter to /manage/smtpscan/domainrouting/. An authenticated attacker can inject arbitrary JavaScript that is stored and executed when other users view the affected page...
6.4CVSS5.9AI score0.00138EPSS
Exploits0References3Affected Software1
CVE-2026-34798
CVE-2026-34798 affects Endian Firewall,
6.4CVSS5.9AI score0.00172EPSS
Exploits0References2Affected Software1
20