# cve.now: Endian

The newest entries naming Endian as an affected vendor (up to 200), of 34 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-34823](https://cve.now/CVE-2026-34823.md): Endian Firewall /manage/password/web/ remark Stored Cross-Site Scripting (CVSS 5.1)
- [CVE-2026-34822](https://cve.now/CVE-2026-34822.md): Endian Firewall /manage/ca/certificate/ new\_cert\_name Stored Cross-Site Scripting (CVSS 5.1)
- [CVE-2026-34821](https://cve.now/CVE-2026-34821.md): Endian Firewall /manage/vpnauthentication/user/ remark Stored Cross-Site Scripting (CVSS 5.1)
- [CVE-2026-34820](https://cve.now/CVE-2026-34820.md): Endian Firewall /manage/ipsec/ remark Stored Cross-Site Scripting (CVSS 5.1)
- [CVE-2026-34819](https://cve.now/CVE-2026-34819.md): Endian Firewall /cgi-bin/openvpnclient.cgi REMARK Stored Cross-Site Scripting (CVSS 5.1)
- [CVE-2026-34818](https://cve.now/CVE-2026-34818.md): Endian Firewall /manage/dnsmasq/localdomains/ remark Stored Cross-Site Scripting (CVSS 5.1)
- [CVE-2026-34817](https://cve.now/CVE-2026-34817.md): Endian Firewall /cgi-bin/smtprouting.cgi ADDRESS BCC Stored Cross-Site Scripting (CVSS 5.1)
- [CVE-2026-34816](https://cve.now/CVE-2026-34816.md): Endian Firewall /manage/smtpscan/domainrouting/ domain Stored Cross-Site Scripting (CVSS 5.1)
- [CVE-2026-34815](https://cve.now/CVE-2026-34815.md): Endian Firewall /cgi-bin/smtpdomains.cgi DOMAIN Stored Cross-Site Scripting (CVSS 5.1)
- [CVE-2026-34814](https://cve.now/CVE-2026-34814.md): Endian Firewall /cgi-bin/proxygroup.cgi group Stored Cross-Site Scripting (CVSS 5.1)
- [CVE-2026-34813](https://cve.now/CVE-2026-34813.md): Endian Firewall /cgi-bin/proxyuser.cgi user Stored Cross-Site Scripting (CVSS 5.1)
- [CVE-2026-34812](https://cve.now/CVE-2026-34812.md): Endian Firewall /cgi-bin/proxypolicy.cgi mimetypes Stored Cross-Site Scripting (CVSS 5.1)
- [CVE-2026-34811](https://cve.now/CVE-2026-34811.md): Endian Firewall /cgi-bin/xtaccess.cgi remark Stored Cross-Site Scripting (CVSS 5.1)
- [CVE-2026-34810](https://cve.now/CVE-2026-34810.md): Endian Firewall /cgi-bin/vpnfw.cgi remark Stored Cross-Site Scripting (CVSS 5.1)
- [CVE-2026-34809](https://cve.now/CVE-2026-34809.md): Endian Firewall /cgi-bin/zonefw.cgi remark Stored Cross-Site Scripting (CVSS 5.1)
- [CVE-2026-34808](https://cve.now/CVE-2026-34808.md): Endian Firewall /cgi-bin/outgoingfw.cgi remark Stored Cross-Site Scripting (CVSS 5.1)
- [CVE-2026-34807](https://cve.now/CVE-2026-34807.md): Endian Firewall /cgi-bin/incoming.cgi remark Stored Cross-Site Scripting (CVSS 5.1)
- [CVE-2026-34806](https://cve.now/CVE-2026-34806.md): Endian Firewall /cgi-bin/snat.cgi remark Stored Cross-Site Scripting (CVSS 5.1)
- [CVE-2026-34805](https://cve.now/CVE-2026-34805.md): Endian Firewall /cgi-bin/dnat.cgi remark Stored Cross-Site Scripting (CVSS 5.1)
- [CVE-2026-34804](https://cve.now/CVE-2026-34804.md): Endian Firewall /manage/qos/rules/ dscp Stored Cross-Site Scripting (CVSS 5.1)
- [CVE-2026-34803](https://cve.now/CVE-2026-34803.md): Endian Firewall /manage/qos/classes/ name Stored Cross-Site Scripting (CVSS 5.1)
- [CVE-2026-34802](https://cve.now/CVE-2026-34802.md): Endian Firewall /cgi-bin/salearn.cgi remark user ham spam Stored Cross-Site Scripting (CVSS 5.1)
- [CVE-2026-34801](https://cve.now/CVE-2026-34801.md): Endian Firewall /manage/dhcp/fixed\_leases/ remark Stored Cross-Site Scripting (CVSS 5.1)
- [CVE-2026-34800](https://cve.now/CVE-2026-34800.md): Endian Firewall /cgi-bin/uplinkeditor.cgi NAME Stored Cross-Site Scripting (CVSS 5.1)
- [CVE-2026-34799](https://cve.now/CVE-2026-34799.md): Endian Firewall /manage/dnsmasq/hosts/ remark Stored Cross-Site Scripting (CVSS 5.1)
- [CVE-2026-34798](https://cve.now/CVE-2026-34798.md): Endian Firewall /cgi-bin/routing.cgi remark Stored Cross-Site Scripting (CVSS 5.1)
- [CVE-2026-34797](https://cve.now/CVE-2026-34797.md): Endian Firewall /cgi-bin/logs\_smtp.cgi DATE Perl Command Injection (CVSS 8.7)
- [CVE-2026-34796](https://cve.now/CVE-2026-34796.md): Endian Firewall /cgi-bin/logs\_openvpn.cgi DATE Perl Command Injection (CVSS 8.7)
- [CVE-2026-34795](https://cve.now/CVE-2026-34795.md): Endian Firewall /cgi-bin/logs\_log.cgi DATE Perl Command Injection (CVSS 8.7)
- [CVE-2026-34794](https://cve.now/CVE-2026-34794.md): Endian Firewall /cgi-bin/logs\_ids.cgi DATE Perl Command Injection (CVSS 8.7)
- [CVE-2026-34793](https://cve.now/CVE-2026-34793.md): Endian Firewall /cgi-bin/logs\_firewall.cgi DATE Perl Command Injection (CVSS 8.7)
- [CVE-2026-34792](https://cve.now/CVE-2026-34792.md): Endian Firewall /cgi-bin/logs\_clamav.cgi DATE Perl Command Injection (CVSS 8.7)
- [CVE-2026-34791](https://cve.now/CVE-2026-34791.md): Endian Firewall /cgi-bin/logs\_proxy.cgi DATE Perl Command Injection (CVSS 8.7)
- [CVE-2026-34790](https://cve.now/CVE-2026-34790.md): Endian Firewall /cgi-bin/backup.cgi remove ARCHIVE Directory Traversal (CVSS 7.1)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/endian
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.