CVE-2026-27508 | Smoothwall Express up to 3.1 Update 12 Parameter /redirect.cgi url cross site scripting (EUVD-2026-17127)

March 30, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in Smoothwall Express up to 3.1 Update 12. This issue affects some unknown processing of the file /redirect.cgi of the component Parameter Handler. The manipulation of the argument url leads to cross site scripting.

This vulnerability is referenced as CVE-2026-27508. Remote exploitation of the attack is possible. No exploit is available.

It is recommended to apply a patch to fix this issue.VulDB Recent EntriesRead More