endian firewall community

Published Atomicorp research notes for CVEs affecting endian firewall community where WAF protections were observed during testing or engineering review.

These notes are not intended to represent the full set of vulnerabilities mitigated by Atomicorp products and should not be interpreted as a coverage matrix, certification list, or census of protected CVEs.

Atomicorp WAF protections are primarily designed around attack techniques and exploit behaviors rather than individual vulnerability identifiers. A published research note documents a positive research finding related to that CVE. If a CVE is absent from these notes, no conclusion should be drawn about protection status.

CVEVulnerabilityCVSSSeverityRules Observed
CVE-2026-34792Endian Firewall /cgi-bin/logs_clamav.cgi DATE Perl Command Injection8.7 (v4.0)High340014 , 340023 , 340029 , 340193 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 347009 , 393655
CVE-2026-34793Endian Firewall /cgi-bin/logs_firewall.cgi DATE Perl Command Injection8.7 (v4.0)High340014 , 340023 , 340029 , 340193 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 347009 , 393655
CVE-2026-34794Endian Firewall /cgi-bin/logs_ids.cgi DATE Perl Command Injection8.7 (v4.0)High340014 , 340029 , 340193 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 347009 , 393655
CVE-2026-34795Endian Firewall /cgi-bin/logs_log.cgi DATE Perl Command Injection8.7 (v4.0)High340014 , 340023 , 340029 , 340193 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 347009 , 393655
CVE-2026-34796Endian Firewall /cgi-bin/logs_openvpn.cgi DATE Perl Command Injection8.7 (v4.0)High340014 , 340023 , 340029 , 340193 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 347009 , 393655
CVE-2026-34797Endian Firewall /cgi-bin/logs_smtp.cgi DATE Perl Command Injection8.7 (v4.0)High340014 , 340023 , 340029 , 340193 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 347009 , 393655
CVE-2026-34798Endian Firewall /cgi-bin/routing.cgi remark Stored Cross-Site Scripting5.1 (v4.0)Medium333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148
CVE-2026-34799Endian Firewall /manage/dnsmasq/hosts/ remark Stored Cross-Site Scripting5.1 (v4.0)Medium333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148
CVE-2026-34800Endian Firewall /cgi-bin/uplinkeditor.cgi NAME Stored Cross-Site Scripting5.1 (v4.0)Medium333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755
CVE-2026-34801Endian Firewall /manage/dhcp/fixed_leases/ remark Stored Cross-Site Scripting5.1 (v4.0)Medium333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148
CVE-2026-34802Endian Firewall /cgi-bin/salearn.cgi remark user ham spam Stored Cross-Site Scripting5.1 (v4.0)Medium333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148
CVE-2026-34803Endian Firewall /manage/qos/classes/ name Stored Cross-Site Scripting5.1 (v4.0)Medium333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755
CVE-2026-34804Endian Firewall /manage/qos/rules/ dscp Stored Cross-Site Scripting5.1 (v4.0)Medium333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148
CVE-2026-34805Endian Firewall /cgi-bin/dnat.cgi remark Stored Cross-Site Scripting5.1 (v4.0)Medium333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148
CVE-2026-34806Endian Firewall /cgi-bin/snat.cgi remark Stored Cross-Site Scripting5.1 (v4.0)Medium333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148
CVE-2026-34807Endian Firewall /cgi-bin/incoming.cgi remark Stored Cross-Site Scripting5.1 (v4.0)Medium333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148
CVE-2026-34808Endian Firewall /cgi-bin/outgoingfw.cgi remark Stored Cross-Site Scripting5.1 (v4.0)Medium333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148
CVE-2026-34809Endian Firewall /cgi-bin/zonefw.cgi remark Stored Cross-Site Scripting5.1 (v4.0)Medium333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148
CVE-2026-34810Endian Firewall /cgi-bin/vpnfw.cgi remark Stored Cross-Site Scripting5.1 (v4.0)Medium333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148
CVE-2026-34811Endian Firewall /cgi-bin/xtaccess.cgi remark Stored Cross-Site Scripting5.1 (v4.0)Medium333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148
CVE-2026-34812Endian Firewall /cgi-bin/proxypolicy.cgi mimetypes Stored Cross-Site Scripting5.1 (v4.0)Medium333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148
CVE-2026-34813Endian Firewall /cgi-bin/proxyuser.cgi user Stored Cross-Site Scripting5.1 (v4.0)Medium333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148
CVE-2026-34814Endian Firewall /cgi-bin/proxygroup.cgi group Stored Cross-Site Scripting5.1 (v4.0)Medium333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148
CVE-2026-34815Endian Firewall /cgi-bin/smtpdomains.cgi DOMAIN Stored Cross-Site Scripting5.1 (v4.0)Medium333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148
CVE-2026-34816Endian Firewall /manage/smtpscan/domainrouting/ domain Stored Cross-Site Scripting5.1 (v4.0)Medium333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148
CVE-2026-34817Endian Firewall /cgi-bin/smtprouting.cgi ADDRESS BCC Stored Cross-Site Scripting5.1 (v4.0)Medium333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148
CVE-2026-34818Endian Firewall /manage/dnsmasq/localdomains/ remark Stored Cross-Site Scripting5.1 (v4.0)Medium333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148
CVE-2026-34819Endian Firewall /cgi-bin/openvpnclient.cgi REMARK Stored Cross-Site Scripting5.1 (v4.0)Medium333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148
CVE-2026-34820Endian Firewall /manage/ipsec/ remark Stored Cross-Site Scripting5.1 (v4.0)Medium333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148
CVE-2026-34821Endian Firewall /manage/vpnauthentication/user/ remark Stored Cross-Site Scripting5.1 (v4.0)Medium333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148
CVE-2026-34822Endian Firewall /manage/ca/certificate/ new_cert_name Stored Cross-Site Scripting5.1 (v4.0)Medium333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148
CVE-2026-34823Endian Firewall /manage/password/web/ remark Stored Cross-Site Scripting5.1 (v4.0)Medium333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148