PT-2026-8369 · Smoothwall · Smoothwall Express

Ozer Goker · Published 2026-02-16 · Updated 2026-02-16 · CVE-2019-25386

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Smoothwall Express version 3.1-SP4-polar-x86 64-update9

Description The software contains multiple reflected cross-site scripting issues within the dmzholes.cgi script. Attackers can inject malicious scripts through unvalidated parameters. Specifically, attackers can submit POST requests with script payloads in the SRC IP, DEST IP, or COMMENT parameters, leading to the execution of arbitrary JavaScript in users' browsers.

Recommendations Apply updates to address the issue in the dmzholes.cgi script. As a temporary workaround, restrict or carefully validate input to the SRC IP, DEST IP, and COMMENT parameters in POST requests to the dmzholes.cgi script.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2019-25386

Affected Products

Smoothwall Express

References · 6

• 🔥 https://exploit-db.com/exploits/46333 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25386 · Security Note
• https://osv.dev/vulnerability/CVE-2019-25386 · Vendor Advisory
• https://t.me/CVEtracker/44838 · Telegram Post
• https://vulncheck.com/advisories/smoothwall-express-dmzholescgi-cross-site-scriptin · Note
• http://smoothwall.org · Note