Medium severity6.4NVD Advisory· Published Apr 2, 2026· Updated Apr 7, 2026
CVE-2026-34823
CVE-2026-34823
Description
Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /manage/password/web/. An authenticated attacker can inject arbitrary JavaScript that is stored and executed when other users view the affected page.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.vulncheck.com/advisories/endian-firewall-manage-password-web-remark-stored-cross-site-scriptingnvdThird Party Advisory
- help.endian.com/hc/en-us/sections/360004371358-CommunitynvdRelease Notes
News mentions
0No linked articles in our index yet.