PT-2026-29756 · Endian Technologies · Endian Firewall

Alex Williams + 1 · Published 2026-04-02 · Updated 2026-04-07 · CVE-2026-34796

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Endian Firewall versions 3.3.25 and prior

Description Endian Firewall versions 3.3.25 and earlier allow authenticated users to execute arbitrary OS commands through the DATE parameter in the '/cgi-bin/logs openvpn.cgi' endpoint. The DATE parameter value is used to construct a file path passed to a Perl open() call, enabling command injection due to insufficient regular expression validation.

Recommendations Update Endian Firewall to a version later than 3.3.25.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2026-34796

Affected Products

Endian Firewall

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-34796 · Security Note
• https://twitter.com/TheHackerWire/status/2040006448856613135 · Twitter Post
• https://vulncheck.com/advisories/endian-firewall-cgi-bin-logs-openvpn-cgi-date-perl-command-injection · Note
• https://twitter.com/CveFindCom/status/2039730713746985273 · Twitter Post
• https://twitter.com/FirmisLabs/status/2041633895196901879 · Twitter Post
• https://help.endian.com/hc/en-us/sections/360004371358-Community · Note
• https://twitter.com/CVEnew/status/2039744321885266061 · Twitter Post