Description
Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/dnat.cgi. An authenticated attacker can inject arbitrary JavaScript that is stored and executed when other users view the affected page.
Published: 2026-04-02
Score: 5.1 Medium
EPSS: n/a
KEV: No
Impact: Stored Cross‑Site Scripting
Action: Patch
AI Analysis

Impact

The vulnerability allows an authenticated administrator to store arbitrary JavaScript in the remark parameter of /cgi-bin/dnat.cgi. The stored script is then rendered when other users load the affected page, enabling malicious code execution in their browsers. This flaw is classified as a stored cross‑site scripting (XSS) vulnerability (CWE‑79).

Affected Systems

Endian Firewall versions 3.3.25 and all earlier releases are affected, including the 2.1.2 series, the 2.4 line, and the 3.3.25 release.

Risk and Exploitability

The CVSS score is 5.1, indicating medium severity, and the EPSS score is not available. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires authenticated access to the firewall’s administrative interface; an attacker must submit a malicious remark string that is stored and later displayed to other users, causing the injected script to execute in their browsers.

Generated by OpenCVE AI on April 2, 2026 at 17:08 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the vendor’s latest patch to Endian Firewall.
  • Restrict or block access to /cgi-bin/dnat.cgi while a fix is applied.
  • Implement server‑side validation or escaping for the remark field to block JavaScript injection.
  • Deploy a web application firewall to filter XSS payloads.
  • Monitor logs for unexpected remark entries and review user activity.

Generated by OpenCVE AI on April 2, 2026 at 17:08 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 02 Apr 2026 15:15:00 +0000

Type Values Removed Values Added
Description Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/dnat.cgi. An authenticated attacker can inject arbitrary JavaScript that is stored and executed when other users view the affected page.
Title Endian Firewall /cgi-bin/dnat.cgi remark Stored Cross-Site Scripting
First Time appeared Endian
Endian firewall
Weaknesses CWE-79
CPEs cpe:2.3:a:endian:firewall:2.1.2:*:*:*:*:*:*:*
cpe:2.3:a:endian:firewall:2.4:*:*:*:*:*:*:*
cpe:2.3:a:endian:firewall:3.3.25:*:*:*:*:*:*:*
Vendors & Products Endian
Endian firewall
References
Metrics cvssV3_1

{'score': 6.4, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N'}

cvssV4_0

{'score': 5.1, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N'}

Subscriptions

Endian Firewall
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-04-02T16:22:44.519Z

Reserved: 2026-03-30T20:26:18.725Z

Link: CVE-2026-34805

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-04-02T15:16:47.653

Modified: 2026-04-02T15:16:47.653

Link: CVE-2026-34805

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-04-02T20:20:39Z

Weaknesses