CVE-2026-34793 | Endian Firewall 3.3.25 Regular Expression logs_firewall.cgi open Date os command injection

A vulnerability, which was classified as critical, was found in Endian Firewall 3.3.25. This impacts the function Open of the file /cgi-bin/logs_firewall.cgi of the component Regular Expression Handler. Such manipulation of the argument Date leads to os command injection.

This vulnerability is uniquely identified as CVE-2026-34793. The attack can be launched remotely. No exploit exists.