Description
Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/snat.cgi. An authenticated attacker can inject arbitrary JavaScript that is stored and executed when other users view the affected page.
Published: 2026-04-02
Score: 5.1 Medium
EPSS: n/a
KEV: No
Impact: Stored Cross‑Site Scripting
Action: Apply Patch
AI Analysis

Impact

Endian Firewall allows an authenticated attacker to submit arbitrary JavaScript via the remark parameter to /cgi-bin/snat.cgi. The injected script is stored and later executed in the browsers of other users when they view the affected page. This flaw is a classic stored XSS vulnerability (CWE‑79).

Affected Systems

The vulnerability affects Endian Firewall versions 2.1.2, 2.4, 3.3.25 and all earlier releases. Any deployment that has not applied a newer version from Endian is potentially exposed.

Risk and Exploitability

The CVSS score of 5.1 indicates a moderate severity. Exploitation requires authenticated access to modify the remark field, so it is not publicly exploitable without credentials. No EPSS score is available and the flaw is not listed in the CISA KEV catalog. The stored XSS could allow attackers to run malicious JavaScript in the context of other users who view the affected page via the web interface.

Generated by OpenCVE AI on April 2, 2026 at 17:20 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update Endian Firewall to a version that fixes the stored XSS flaw.
  • If an upgrade is not immediately possible, restrict access to the remark feature so that only trusted administrators can edit it.
  • Implement input validation or sanitization for the remark field to prevent script injection.
  • Monitor user activity logs for unusual writes to the remark field and review user permissions.

Generated by OpenCVE AI on April 2, 2026 at 17:20 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 02 Apr 2026 20:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 02 Apr 2026 15:15:00 +0000

Type Values Removed Values Added
Description Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/snat.cgi. An authenticated attacker can inject arbitrary JavaScript that is stored and executed when other users view the affected page.
Title Endian Firewall /cgi-bin/snat.cgi remark Stored Cross-Site Scripting
First Time appeared Endian
Endian firewall
Weaknesses CWE-79
CPEs cpe:2.3:a:endian:firewall:2.1.2:*:*:*:*:*:*:*
cpe:2.3:a:endian:firewall:2.4:*:*:*:*:*:*:*
cpe:2.3:a:endian:firewall:3.3.25:*:*:*:*:*:*:*
Vendors & Products Endian
Endian firewall
References
Metrics cvssV3_1

{'score': 6.4, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N'}

cvssV4_0

{'score': 5.1, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N'}

Subscriptions

Endian Firewall
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-04-02T18:40:24.255Z

Reserved: 2026-03-30T20:26:18.725Z

Link: CVE-2026-34806

cve-icon Vulnrichment

Updated: 2026-04-02T18:40:18.493Z

cve-icon NVD

Status : Received

Published: 2026-04-02T15:16:47.857

Modified: 2026-04-02T15:16:47.857

Link: CVE-2026-34806

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-04-02T20:20:38Z

Weaknesses