CVE-2026-34796 | Endian Firewall 3.3.25 Regular Expression logs_openvpn.cgi open Date os command injection

April 2, 2026 Yanac

A vulnerability identified as critical has been detected in Endian Firewall 3.3.25. This affects the function Open of the file /cgi-bin/logs_openvpn.cgi of the component Regular Expression Handler. This manipulation of the argument Date causes os command injection.

This vulnerability is registered as CVE-2026-34796. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More