Skip to content
Noroxi

Endian records

37 published records for vendor endian.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 21
  2. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

37 records
  • CVE-2021-27201
    36Monitor

    Endian Firewall Community (aka EFW) 3.3.2 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in a b

    HighCVSS 8.8No exploitEPSS 2%

    endian · firewall communityFeb 15, 2021

  • CVE-2026-34795
    34Monitor

    Endian Firewall /cgi-bin/logs_log.cgi DATE Perl Command Injection

    HighCVSS 8.7No exploitEPSS 1%

    endian · firewall communityApr 2, 2026

  • CVE-2026-34796
    34Monitor

    Endian Firewall /cgi-bin/logs_openvpn.cgi DATE Perl Command Injection

    HighCVSS 8.7No exploitEPSS 1%

    endian · firewall communityApr 2, 2026

  • CVE-2026-34792
    34Monitor

    Endian Firewall /cgi-bin/logs_clamav.cgi DATE Perl Command Injection

    HighCVSS 8.7No exploitEPSS 1%

    endian · firewall communityApr 2, 2026

  • CVE-2026-34791
    34Monitor

    Endian Firewall /cgi-bin/logs_proxy.cgi DATE Perl Command Injection

    HighCVSS 8.7No exploitEPSS 1%

    endian · firewall communityApr 2, 2026

  • CVE-2026-34793
    34Monitor

    Endian Firewall /cgi-bin/logs_firewall.cgi DATE Perl Command Injection

    HighCVSS 8.7No exploitEPSS 1%

    endian · firewall communityApr 2, 2026

  • CVE-2026-34797
    34Monitor

    Endian Firewall /cgi-bin/logs_smtp.cgi DATE Perl Command Injection

    HighCVSS 8.7No exploitEPSS 1%

    endian · firewall communityApr 2, 2026

  • CVE-2026-34794
    34Monitor

    Endian Firewall /cgi-bin/logs_ids.cgi DATE Perl Command Injection

    HighCVSS 8.7No exploitEPSS 1%

    endian · firewall communityApr 2, 2026

  • CVE-2026-34790
    28Monitor

    Endian Firewall /cgi-bin/backup.cgi remove ARCHIVE Directory Traversal

    HighCVSS 7.1No exploitEPSS 0%

    endian · firewall communityApr 2, 2026

  • CVE-2026-34807
    20Monitor

    Endian Firewall /cgi-bin/incoming.cgi remark Stored Cross-Site Scripting

    MediumCVSS 5.1No exploitEPSS 0%

    endian · firewall communityApr 2, 2026

  • CVE-2026-34801
    20Monitor

    Endian Firewall /manage/dhcp/fixed_leases/ remark Stored Cross-Site Scripting

    MediumCVSS 5.1No exploitEPSS 0%

    endian · firewall communityApr 2, 2026

  • CVE-2026-34819
    20Monitor

    Endian Firewall /cgi-bin/openvpnclient.cgi REMARK Stored Cross-Site Scripting

    MediumCVSS 5.1No exploitEPSS 0%

    endian · firewall communityApr 2, 2026

  • CVE-2026-34813
    20Monitor

    Endian Firewall /cgi-bin/proxyuser.cgi user Stored Cross-Site Scripting

    MediumCVSS 5.1No exploitEPSS 0%

    endian · firewall communityApr 2, 2026

  • CVE-2026-34798
    20Monitor

    Endian Firewall /cgi-bin/routing.cgi remark Stored Cross-Site Scripting

    MediumCVSS 5.1No exploitEPSS 0%

    endian · firewall communityApr 2, 2026

  • CVE-2026-34800
    20Monitor

    Endian Firewall /cgi-bin/uplinkeditor.cgi NAME Stored Cross-Site Scripting

    MediumCVSS 5.1No exploitEPSS 0%

    endian · firewall communityApr 2, 2026

  • CVE-2026-34802
    20Monitor

    Endian Firewall /cgi-bin/salearn.cgi remark user ham spam Stored Cross-Site Scripting

    MediumCVSS 5.1No exploitEPSS 0%

    endian · firewall communityApr 2, 2026

  • CVE-2026-34803
    20Monitor

    Endian Firewall /manage/qos/classes/ name Stored Cross-Site Scripting

    MediumCVSS 5.1No exploitEPSS 0%

    endian · firewall communityApr 2, 2026

  • CVE-2026-34804
    20Monitor

    Endian Firewall /manage/qos/rules/ dscp Stored Cross-Site Scripting

    MediumCVSS 5.1No exploitEPSS 0%

    endian · firewall communityApr 2, 2026

  • CVE-2026-34805
    20Monitor

    Endian Firewall /cgi-bin/dnat.cgi remark Stored Cross-Site Scripting

    MediumCVSS 5.1No exploitEPSS 0%

    endian · firewall communityApr 2, 2026

  • CVE-2026-34806
    20Monitor

    Endian Firewall /cgi-bin/snat.cgi remark Stored Cross-Site Scripting

    MediumCVSS 5.1No exploitEPSS 0%

    endian · firewall communityApr 2, 2026

  • CVE-2026-34799
    20Monitor

    Endian Firewall /manage/dnsmasq/hosts/ remark Stored Cross-Site Scripting

    MediumCVSS 5.1No exploitEPSS 0%

    endian · firewall communityApr 2, 2026

  • CVE-2026-34821
    20Monitor

    Endian Firewall /manage/vpnauthentication/user/ remark Stored Cross-Site Scripting

    MediumCVSS 5.1No exploitEPSS 0%

    endian · firewall communityApr 2, 2026

  • CVE-2026-34823
    20Monitor

    Endian Firewall /manage/password/web/ remark Stored Cross-Site Scripting

    MediumCVSS 5.1No exploitEPSS 0%

    endian · firewall communityApr 2, 2026

  • CVE-2026-34808
    20Monitor

    Endian Firewall /cgi-bin/outgoingfw.cgi remark Stored Cross-Site Scripting

    MediumCVSS 5.1No exploitEPSS 0%

    endian · firewall communityApr 2, 2026

  • CVE-2026-34809
    20Monitor

    Endian Firewall /cgi-bin/zonefw.cgi remark Stored Cross-Site Scripting

    MediumCVSS 5.1No exploitEPSS 0%

    endian · firewall communityApr 2, 2026