CVE-2026-34791 - Vulnerability Analysis

Overview

Endian Firewall <= 3.3.25 contains a command injection caused by incomplete validation of the DATE parameter in /cgi-bin/logs_proxy.cgi, letting authenticated users execute arbitrary OS commands.

Severity & Score

Impact

Authenticated users can execute arbitrary OS commands, potentially leading to full system compromise.

Mitigation

Update to a version later than 3.3.25 or the latest available version.

References

• https://help.endian.com/hc/en-us/sections/360004371358-Community
• https://www.vulncheck.com/advisories/endian-firewall-cgi-bin-logs-proxy-cgi-date-perl-command-injection

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Apr 3, 2026

🟠 CVE-2026-34791 - High (8.8) Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_proxy.cgi. The DATE parameter value is used to construct a file path that is passed to a Perl open() call, ... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-34791/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner