A vulnerability described as problematic has been identified in Endian Firewall 3.3.25. Affected by this vulnerability is an unknown functionality of the file /manage/dnsmasq/localdomains/ of the component Parameter Handler. Such manipulation of the argument remark leads to cross site scripting.

This vulnerability is documented as CVE-2026-34818. The attack can be executed remotely. There is not any exploit available.