CVE-2026-34795 | Endian Firewall 3.3.25 Regular Expression /cgi-bin/logs_log.cgi open Date os command injection

A vulnerability, which was classified as critical, has been found in Endian Firewall 3.3.25. This affects the function Open of the file /cgi-bin/logs_log.cgi of the component Regular Expression Handler. This manipulation of the argument Date causes os command injection.

This vulnerability is handled as CVE-2026-34795. The attack can be initiated remotely. There is not any exploit available.