3 matches found
EUVD-2026-18314
Endian Firewall version 3.3.25 and prior allow stored cross-site scripting XSS via the domain parameter to /manage/smtpscan/domainrouting/. An authenticated attacker can inject arbitrary JavaScript that is stored and executed when other users view the affected page...
6.4CVSS5.9AI score0.00138EPSS
SaveExploits0References3
CVE-2026-34816
Endian Firewall version 3.3.25 and prior allow stored cross-site scripting XSS via the domain parameter to /manage/smtpscan/domainrouting/. An authenticated attacker can inject arbitrary JavaScript that is stored and executed when other users view the affected page...
6.4CVSS5.9AI score0.00138EPSS
SaveExploits0References3Affected Software1
20