https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T23:51:30.797363+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-34790 CVE-2026-34790 — Endian Firewall /cgi-bin/backup.cgi remove ARCHIVE Directory Traversal 2026-10-07T23:51:30.813242+00:00

Affected: Endian Firewall

Endian Firewall version 3.3.25 and prior allow authenticated users to delete arbitrary files via directory traversal in the remove ARCHIVE parameter to /cgi-bin/backup.cgi. The remove ARCHIVE parameter value is used to construct a file path without sanitization of directory traversal sequences, which is then passed to an unlink() call.