Endian

8 results · Clear filters · Feed

• High 8.8
  CVE-2026-34797

  Endian Firewall /cgi-bin/logs_smtp.cgi DATE Perl Command Injection

  Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_smtp.cgi. The DATE parameter value is used to construct a file path that is passed to a Perl open() call, which allows …

  Endian Endian Firewall
  Apr 2, 2026
• High 8.8
  CVE-2026-34796

  Endian Firewall /cgi-bin/logs_openvpn.cgi DATE Perl Command Injection

  Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_openvpn.cgi. The DATE parameter value is used to construct a file path that is passed to a Perl open() call, which allo…

  Endian Endian Firewall
  Apr 2, 2026
• High 8.8
  CVE-2026-34795

  Endian Firewall /cgi-bin/logs_log.cgi DATE Perl Command Injection

  Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_log.cgi. The DATE parameter value is used to construct a file path that is passed to a Perl open() call, which allows c…

  Endian Endian Firewall
  Apr 2, 2026
• High 8.8
  CVE-2026-34794

  Endian Firewall /cgi-bin/logs_ids.cgi DATE Perl Command Injection

  Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_ids.cgi. The DATE parameter value is used to construct a file path that is passed to a Perl open() call, which allows c…

  Endian Endian Firewall
  Apr 2, 2026
• High 8.8
  CVE-2026-34793

  Endian Firewall /cgi-bin/logs_firewall.cgi DATE Perl Command Injection

  Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_firewall.cgi. The DATE parameter value is used to construct a file path that is passed to a Perl open() call, which all…

  Endian Endian Firewall
  Apr 2, 2026
• High 8.8
  CVE-2026-34792

  Endian Firewall /cgi-bin/logs_clamav.cgi DATE Perl Command Injection

  Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_clamav.cgi. The DATE parameter value is used to construct a file path that is passed to a Perl open() call, which allow…

  Endian Endian Firewall
  Apr 2, 2026
• High 8.8
  CVE-2026-34791

  Endian Firewall /cgi-bin/logs_proxy.cgi DATE Perl Command Injection

  Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_proxy.cgi. The DATE parameter value is used to construct a file path that is passed to a Perl open() call, which allows…

  Endian Endian Firewall
  Apr 2, 2026
• High 7.1
  CVE-2026-34790

  Endian Firewall /cgi-bin/backup.cgi remove ARCHIVE Directory Traversal

  Endian Firewall version 3.3.25 and prior allow authenticated users to delete arbitrary files via directory traversal in the remove ARCHIVE parameter to /cgi-bin/backup.cgi. The remove ARCHIVE parameter value is used to construct a file path without sanitizati…

  Endian Endian Firewall
  Apr 2, 2026