2026 CVE Vulnerabilities
66,513 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-34821 | MEDIUM | 5.4 | 0.2% | Apr 2, 2026 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /manage/vpn... |
| CVE-2026-34820 | MEDIUM | 5.4 | 0.1% | Apr 2, 2026 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /manage/ips... |
| CVE-2026-34819 | MEDIUM | 5.4 | 0.2% | Apr 2, 2026 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the REMARK parameter to /cgi-bin/op... |
| CVE-2026-34818 | MEDIUM | 5.4 | 0.1% | Apr 2, 2026 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /manage/dns... |
| CVE-2026-34817 | MEDIUM | 5.4 | 0.1% | Apr 2, 2026 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the ADDRESS BCC parameter to /cgi-b... |
| CVE-2026-34816 | MEDIUM | 5.4 | 0.1% | Apr 2, 2026 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the domain parameter to /manage/smt... |
| CVE-2026-34815 | MEDIUM | 5.4 | 0.1% | Apr 2, 2026 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the DOMAIN parameter to /cgi-bin/sm... |
| CVE-2026-34814 | MEDIUM | 5.4 | 0.1% | Apr 2, 2026 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the group parameter to /cgi-bin/pro... |
| CVE-2026-34813 | MEDIUM | 5.4 | 0.2% | Apr 2, 2026 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the user parameter to /cgi-bin/prox... |
| CVE-2026-34812 | MEDIUM | 5.4 | 0.1% | Apr 2, 2026 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the mimetypes parameter to /cgi-bin... |
| CVE-2026-34811 | MEDIUM | 5.4 | 0.1% | Apr 2, 2026 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/xt... |
| CVE-2026-34810 | MEDIUM | 5.4 | 0.1% | Apr 2, 2026 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/vp... |
| CVE-2026-34809 | MEDIUM | 5.4 | 0.1% | Apr 2, 2026 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/zo... |
| CVE-2026-34808 | MEDIUM | 5.4 | 0.1% | Apr 2, 2026 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/ou... |
| CVE-2026-34807 | MEDIUM | 5.4 | 0.2% | Apr 2, 2026 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/in... |
| CVE-2026-34806 | MEDIUM | 5.4 | 0.2% | Apr 2, 2026 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/sn... |
| CVE-2026-34805 | MEDIUM | 5.4 | 0.2% | Apr 2, 2026 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/dn... |
| CVE-2026-34804 | MEDIUM | 5.4 | 0.2% | Apr 2, 2026 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the dscp parameter to /manage/qos/r... |
| CVE-2026-34803 | MEDIUM | 5.4 | 0.2% | Apr 2, 2026 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the name parameter to /manage/qos/c... |
| CVE-2026-34802 | MEDIUM | 5.4 | 0.2% | Apr 2, 2026 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark user ham spam parameter ... |
| CVE-2026-34801 | MEDIUM | 5.4 | 0.2% | Apr 2, 2026 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /manage/dhc... |
| CVE-2026-34800 | MEDIUM | 5.4 | 0.2% | Apr 2, 2026 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the NAME parameter to /cgi-bin/upli... |
| CVE-2026-34799 | MEDIUM | 5.4 | 0.2% | Apr 2, 2026 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /manage/dns... |
| CVE-2026-34798 | MEDIUM | 5.4 | 0.2% | Apr 2, 2026 | Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/ro... |
| CVE-2026-34797 | HIGH | 8.8 | 1.2% | Apr 2, 2026 | Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE paramet... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now