A vulnerability described as problematic has been identified in Endian Firewall 3.3.25. Affected by this vulnerability is an unknown functionality of the file /manage/dnsmasq/localdomains/ of the component Parameter Handler. Such manipulation of the argument remark leads to cross site scripting. This vulnerability is documented as CVE-2026-34818. The attack can be executed remotely.
| Vendor | Product | Versions |
|---|---|---|
| endian | endian firewall | 3.3.25 |
Updated description with more technical detail, marked exploit availability as false, and noted that the vulnerability is actively exploited.
Initial creation
