guardian language-system
Published Atomicorp research notes for CVEs affecting guardian language-system where WAF protections were observed during testing or engineering review.
These notes are not intended to represent the full set of vulnerabilities mitigated by Atomicorp products and should not be interpreted as a coverage matrix, certification list, or census of protected CVEs.
Atomicorp WAF protections are primarily designed around attack techniques and exploit behaviors rather than individual vulnerability identifiers. A published research note documents a positive research finding related to that CVE. If a CVE is absent from these notes, no conclusion should be drawn about protection status.
| CVE | Vulnerability | CVSS | Severity | Rules Observed |
|---|---|---|---|---|
| CVE-2026-34106 | Guardian Language-System Unauthenticated OS Command Injection via id Parameter in subtitles.php | 9.3 (v4.0) | Critical | 340014 , 340029 , 340193 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 347009 , 393655 |
| CVE-2026-34108 | Guardian Language-System Unauthenticated OS Command Injection via id Parameter in text.php | 9.3 (v4.0) | Critical | 340014 , 340029 , 340193 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 347009 , 393655 |
| CVE-2026-34109 | Guardian Language-System Unauthenticated OS Command Injection via id Parameter in speech.php | 9.3 (v4.0) | Critical | 340014 , 340029 , 340193 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 347009 , 393655 |
| CVE-2026-34110 | Guardian Language-System Unauthenticated OS Command Injection via id Parameter in complex_start.php | 9.3 (v4.0) | Critical | 340014 , 340029 , 340193 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 347009 , 393655 |
| CVE-2026-34111 | Guardian Language-System Unauthenticated OS Command Injection via id Parameter in speechmac_text.php | 9.3 (v4.0) | Critical | 340014 , 340029 , 340193 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 347009 , 393655 |
| CVE-2026-34112 | Guardian Language-System Unauthenticated OS Command Injection via id Parameter in speechmac.php | 9.3 (v4.0) | Critical | 340014 , 340029 , 340193 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 347009 , 393655 |
| CVE-2026-34115 | Guardian Language-System Unauthenticated OS Command Injection via id Parameter in transcribe_amazon.php | 9.3 (v4.0) | Critical | 340014 , 340029 , 340193 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 347009 , 393655 |
| CVE-2026-34100 | Guardian Language-System SQL Injection via id Parameter in media.php | 8.7 (v4.0) | High | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2026-34101 | Guardian Language-System SQL Injection via id Parameter in text_file.php | 8.7 (v4.0) | High | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2026-34102 | Guardian Language-System SQL Injection via id Parameter in job_info_get.php | 8.7 (v4.0) | High | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2026-34103 | Guardian Language-System SQL Injection via id Parameter in subtitles.php | 8.7 (v4.0) | High | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2026-34104 | Guardian Language-System SQL Injection via name Parameter in designer.php | 8.7 (v4.0) | High | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2026-34105 | Guardian Language-System SQL Injection via id Parameter in translate_text.php | 8.7 (v4.0) | High | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2026-34096 | Guardian Language-System XSS via name Parameter in designer.php | 4.8 (v4.0) | Medium | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 |
| CVE-2026-34097 | Guardian Language-System XSS via id Parameter in text_file.php | 4.8 (v4.0) | Medium | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-34098 | Guardian Language-System XSS via id Parameter in media.php | 4.8 (v4.0) | Medium | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |