PT-2026-29061 · Smoothwall · Express

Alex Williams + 1 · Published 2026-03-30 · Updated 2026-03-30 · CVE-2026-26352

Mitre

CVSS v3.1

5.4

Medium

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Smoothwall Express versions prior to 3.1 Update 13 contain a stored cross-site scripting vulnerability in the /cgi-bin/vpnmain.cgi script due to improper sanitation of the VPN IP parameter. Authenticated attackers can inject arbitrary JavaScript through VPN configuration settings that executes when the affected page is viewed by other users.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-26352

Affected Products

Express

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-26352 · Security Note
• https://vulncheck.com/advisories/smoothwall-express-stored-xss-in-vpnmain-cgi-via-vpn-ip-parameter · Note
• https://community.smoothwall.org/forum/viewtopic.php?t=45095 · Patch, Vendor Advisory