https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T18:00:23.131033+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2026-18416 cnvd-2026-18416 2026-10-06T18:00:23.183013+00:00 cnvd-2026-18416 https://cve.radiocsirt.org/vuln/euvd-2026-280030 EUVD-2026-280030 2026-10-06T18:00:23.183058+00:00 EUVD-2026-280030 https://cve.radiocsirt.org/vuln/fkie_cve-2026-34800 fkie_cve-2026-34800 2026-10-06T18:00:23.183073+00:00

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the NAME parameter to /cgi-bin/uplinkeditor.cgi. An authenticated attacker can inject arbitrary JavaScript that is stored and executed when other users view the affected page.

 https://cve.radiocsirt.org/vuln/ghsa-56cp-r28q-xw7f GHSA-56cp-r28q-xw7f 2026-10-06T18:00:23.183104+00:00

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the NAME parameter to /cgi-bin/uplinkeditor.cgi. An authenticated attacker can inject arbitrary JavaScript that is stored and executed when other users view the affected page.