PT-2026-8370 · Smoothwall · Smoothwall Express

Ozer Goker · Published 2026-02-16 · Updated 2026-02-20 · CVE-2019-25387

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Smoothwall Express version 3.1-SP4-polar-x86 64-update9

Description The software contains a reflected cross-site scripting issue that allows unauthenticated attackers to inject malicious scripts. Attackers can submit crafted input to the /xtaccess.cgi endpoint to achieve this. Specifically, script payloads can be injected through the EXT, DEST PORT, or COMMENT parameters via POST requests, leading to the execution of arbitrary JavaScript in victim browsers.

Recommendations Apply input validation and output encoding to the EXT, DEST PORT, and COMMENT parameters in the /xtaccess.cgi endpoint.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2019-25387

Affected Products

Smoothwall Express

References · 7

• 🔥 https://exploit-db.com/exploits/46333 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25387 · Security Note
• https://osv.dev/vulnerability/CVE-2019-25387 · Vendor Advisory
• http://smoothwall.org · Note
• https://vulncheck.com/advisories/smoothwall-express-xtaccesscgi-cross-site-scriptin · Note
• https://t.me/cveNotify/152609 · Telegram Post
• https://t.me/CVEtracker/44839 · Telegram Post