# Endian vulnerabilities

Source: https://junglewise.ai/threats/vendors/endian  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour.  
Data: https://junglewise.ai/threats/vendors/endian.json  
License: CC BY 4.0 with a link back

Junglewise Threat Intelligence has tracked 34 vulnerabilities in Endian: 0 in the last 7 days and 0 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-34823, was published on 2 April 2026. 1 technology has a page of its own.

## Counts

- Last 7 days: 0
- Last 30 days: 0
- Last 90 days: 0
- All time: 34 (0 critical, 0 exploited in the wild)

## About Endian

Endian is a security software company that develops network security solutions, including unified threat management and industrial firewalls.

## Latest Endian vulnerabilities

- [CVE-2026-34823: Endian Firewall stored XSS in remark parameter](https://junglewise.ai/threats/cve-2026-34823-endian-firewall-stored-xss-in-remark-parameter) (medium, CVSS 6.4, published 2 Apr 2026)
- [CVE-2026-34822: Endian Firewall stored XSS in certificate management interface](https://junglewise.ai/threats/cve-2026-34822-endian-firewall-stored-xss-in-certificate-management-interface) (medium, CVSS 6.4, published 2 Apr 2026)
- [CVE-2026-34821: Endian Firewall stored XSS in VPN user remark parameter](https://junglewise.ai/threats/cve-2026-34821-endian-firewall-stored-xss-in-vpn-user-remark-parameter) (medium, CVSS 6.4, published 2 Apr 2026)
- [CVE-2026-34820: Endian Firewall stored XSS in IPsec remark parameter](https://junglewise.ai/threats/cve-2026-34820-endian-firewall-stored-xss-in-ipsec-remark-parameter) (medium, CVSS 6.4, published 2 Apr 2026)
- [CVE-2026-34819: Endian Firewall stored XSS in openvpnclient.cgi](https://junglewise.ai/threats/cve-2026-34819-endian-firewall-stored-xss-in-openvpnclient-cgi) (medium, CVSS 6.4, published 2 Apr 2026)
- [CVE-2026-34818: Endian Firewall stored XSS in dnsmasq local domains remark parameter](https://junglewise.ai/threats/cve-2026-34818-endian-firewall-stored-xss-in-dnsmasq-local-domains-remark) (medium, CVSS 6.4, published 2 Apr 2026)
- [CVE-2026-34817: Endian Firewall stored XSS in smtprouting.cgi](https://junglewise.ai/threats/cve-2026-34817-endian-firewall-stored-xss-in-smtprouting-cgi) (medium, CVSS 6.4, published 2 Apr 2026)
- [CVE-2026-34816: Endian Firewall stored XSS in SMTP scan domain routing](https://junglewise.ai/threats/cve-2026-34816-endian-firewall-stored-xss-in-smtp-scan-domain-routing) (medium, CVSS 6.4, published 2 Apr 2026)
- [CVE-2026-34815: Endian Firewall stored XSS in smtpdomains.cgi](https://junglewise.ai/threats/cve-2026-34815-endian-firewall-stored-xss-in-smtpdomains-cgi) (medium, CVSS 6.4, published 2 Apr 2026)
- [CVE-2026-34814: Endian Firewall stored XSS in proxygroup.cgi](https://junglewise.ai/threats/cve-2026-34814-endian-firewall-stored-xss-in-proxygroup-cgi) (medium, CVSS 6.4, published 2 Apr 2026)
- [CVE-2026-34813: Endian Firewall stored XSS in proxyuser.cgi](https://junglewise.ai/threats/cve-2026-34813-endian-firewall-stored-xss-in-proxyuser-cgi) (medium, CVSS 6.4, published 2 Apr 2026)
- [CVE-2026-34812: Endian Firewall stored XSS in proxypolicy.cgi mimetypes parameter](https://junglewise.ai/threats/cve-2026-34812-endian-firewall-stored-xss-in-proxypolicy-cgi-mimetypes-parameter) (medium, CVSS 6.4, published 2 Apr 2026)
- [CVE-2026-34811: Endian Firewall stored XSS in xtaccess.cgi remark parameter](https://junglewise.ai/threats/cve-2026-34811-endian-firewall-stored-xss-in-xtaccess-cgi-remark-parameter) (medium, CVSS 6.4, published 2 Apr 2026)
- [CVE-2026-34810: Endian Firewall stored XSS in vpnfw.cgi remark parameter](https://junglewise.ai/threats/cve-2026-34810-endian-firewall-stored-xss-in-vpnfw-cgi-remark-parameter) (medium, CVSS 6.4, published 2 Apr 2026)
- [CVE-2026-34809: Endian Firewall stored XSS in zonefw.cgi remark parameter](https://junglewise.ai/threats/cve-2026-34809-endian-firewall-stored-xss-in-zonefw-cgi-remark-parameter) (medium, CVSS 6.4, published 2 Apr 2026)
- [CVE-2026-34808: Endian Firewall stored XSS in outgoingfw.cgi remark parameter](https://junglewise.ai/threats/cve-2026-34808-endian-firewall-stored-xss-in-outgoingfw-cgi-remark-parameter) (medium, CVSS 6.4, published 2 Apr 2026)
- [CVE-2026-34807: Endian Firewall stored XSS in incoming.cgi remark parameter](https://junglewise.ai/threats/cve-2026-34807-endian-firewall-stored-xss-in-incoming-cgi-remark-parameter) (medium, CVSS 6.4, published 2 Apr 2026)
- [CVE-2026-34806: Endian Firewall stored XSS in snat.cgi remark parameter](https://junglewise.ai/threats/cve-2026-34806-endian-firewall-stored-xss-in-snat-cgi-remark-parameter) (medium, CVSS 6.4, published 2 Apr 2026)
- [CVE-2026-34805: Endian Firewall stored XSS in dnat.cgi remark parameter](https://junglewise.ai/threats/cve-2026-34805-endian-firewall-stored-xss-in-dnat-cgi-remark-parameter) (medium, CVSS 6.4, published 2 Apr 2026)
- [CVE-2026-34804: Endian Firewall stored XSS in QoS rules dscp parameter](https://junglewise.ai/threats/cve-2026-34804-endian-firewall-stored-xss-in-qos-rules-dscp-parameter) (medium, CVSS 6.4, published 2 Apr 2026)
- [CVE-2026-34803: Endian Firewall stored XSS in QoS classes management interface](https://junglewise.ai/threats/cve-2026-34803-endian-firewall-stored-xss-in-qos-classes-management-interface) (medium, CVSS 6.4, published 2 Apr 2026)
- [CVE-2026-34802: Endian Firewall stored XSS in salearn.cgi](https://junglewise.ai/threats/cve-2026-34802-endian-firewall-stored-xss-in-salearn-cgi) (medium, CVSS 6.4, published 2 Apr 2026)
- [CVE-2026-34801: Endian Firewall stored XSS in DHCP fixed leases remark parameter](https://junglewise.ai/threats/cve-2026-34801-endian-firewall-stored-xss-in-dhcp-fixed-leases-remark-parameter) (medium, CVSS 6.4, published 2 Apr 2026)
- [CVE-2026-34800: Endian Firewall stored XSS in uplinkeditor.cgi](https://junglewise.ai/threats/cve-2026-34800-endian-firewall-stored-xss-in-uplinkeditor-cgi) (medium, CVSS 6.4, published 2 Apr 2026)
- [CVE-2026-34799: Endian Firewall stored XSS in dnsmasq hosts remark parameter](https://junglewise.ai/threats/cve-2026-34799-endian-firewall-stored-xss-in-dnsmasq-hosts-remark-parameter) (medium, CVSS 6.4, published 2 Apr 2026)

## Most severe Endian vulnerabilities

- [CVE-2026-34796: Endian Firewall OS command injection in logs_openvpn.cgi](https://junglewise.ai/threats/cve-2026-34796-endian-firewall-os-command-injection-in-logs-openvpn-cgi) (high, CVSS 8.8, published 2 Apr 2026)
- [CVE-2026-34795: Endian Firewall OS command injection in logs_log.cgi](https://junglewise.ai/threats/cve-2026-34795-endian-firewall-os-command-injection-in-logs-log-cgi) (high, CVSS 8.8, published 2 Apr 2026)
- [CVE-2026-34792: Endian Firewall OS command injection in logs_clamav.cgi](https://junglewise.ai/threats/cve-2026-34792-endian-firewall-os-command-injection-in-logs-clamav-cgi) (high, CVSS 8.8, published 2 Apr 2026)
- [CVE-2026-34791: Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE…](https://junglewise.ai/threats/cve-2026-34791-endian-firewall-version-3-3-25-and-prior-allow-authenticated) (high, CVSS 8.8, published 2 Apr 2026)
- [CVE-2026-34797: Endian Firewall OS command injection in logs_smtp.cgi](https://junglewise.ai/threats/cve-2026-34797-endian-firewall-os-command-injection-in-logs-smtp-cgi) (high, CVSS 8.8, published 2 Apr 2026)
- [CVE-2026-34793: Endian Firewall OS command injection in logs_firewall.cgi](https://junglewise.ai/threats/cve-2026-34793-endian-firewall-os-command-injection-in-logs-firewall-cgi) (high, CVSS 8.8, published 2 Apr 2026)
- [CVE-2026-34794: Endian Firewall OS command injection in logs_ids.cgi](https://junglewise.ai/threats/cve-2026-34794-endian-firewall-os-command-injection-in-logs-ids-cgi) (high, CVSS 8.8, published 2 Apr 2026)
- [CVE-2026-34790: Endian Firewall version 3.3.25 and prior allow authenticated users to delete arbitrary files via directory traversal…](https://junglewise.ai/threats/cve-2026-34790-endian-firewall-version-3-3-25-and-prior-allow-authenticated) (high, CVSS 7.1, published 2 Apr 2026)
- [CVE-2026-34807: Endian Firewall stored XSS in incoming.cgi remark parameter](https://junglewise.ai/threats/cve-2026-34807-endian-firewall-stored-xss-in-incoming-cgi-remark-parameter) (medium, CVSS 6.4, published 2 Apr 2026)
- [CVE-2026-34801: Endian Firewall stored XSS in DHCP fixed leases remark parameter](https://junglewise.ai/threats/cve-2026-34801-endian-firewall-stored-xss-in-dhcp-fixed-leases-remark-parameter) (medium, CVSS 6.4, published 2 Apr 2026)

## Vulnerabilities per week

Nothing was published in the last eight weeks.

| Week of | Vulns | Critical | Exploited |
| --- | --- | --- | --- |
| 17 Aug 2026 | 0 | 0 | 0 |
| 24 Aug 2026 | 0 | 0 | 0 |
| 31 Aug 2026 | 0 | 0 | 0 |
| 7 Sep 2026 | 0 | 0 | 0 |
| 14 Sep 2026 | 0 | 0 | 0 |
| 21 Sep 2026 | 0 | 0 | 0 |
| 28 Sep 2026 | 0 | 0 | 0 |
| 5 Oct 2026 | 0 | 0 | 0 |
| 12 Oct 2026 | 0 | 0 | 0 |
| 19 Oct 2026 | 0 | 0 | 0 |
| 26 Oct 2026 | 0 | 0 | 0 |
| 2 Nov 2026 | 0 | 0 | 0 |
| 9 Nov 2026 | 0 | 0 | 0 |

## Endian technologies

- [Endian-Firewall-Community](https://junglewise.ai/threats/technologies/firewall-community): 34 vulnerabilities

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Endian vulnerabilities", https://junglewise.ai/threats/vendors/endian, 9 November 2026.