CVE-2026-34792Disclosure(endian / firewall_community)

LOWCVSS 8.7 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_clamav.cgi. The DATE parameter value is used to construct a file path that is passed to a Perl open() call, which allows command injection due to an incomplete regular expression validation.

endian CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.vulncheck.com/advisories/endian-firewall-cgi-bin-logs-clamav-cgi-date-perl-command-injection

Other references

https://help.endian.com/hc/en-us/sections/360004371358-Community

Weakness type (CWE)

CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

firewall_community

Threat summary

4 mentions across 3 observed days
Momentum state: stable

What's happening

Technical details provided in 4 signals
Disclosure: 3 classified signals
General: 1 classified signal
Peaked 2d ago at 2 mentions (2026-04-02); latest day: 1
4 total mentions across 3 days

Affected systems

Vendors

endian

Products

firewall_community

Deep dive

Activity timeline4 mentions / 3d

Signal classification2 categories

Disclosure

375.0%

General

125.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-04-02	2	Disclosure2
2026-04-05	1	Disclosure1
2026-04-07	1	General1

Full discourse4 posts

Firmis Labs@FirmisLabs183d
General
CVE-2026-34792 · NIST 8.8/10 https://nvd.nist.gov/vuln/detail/CVE-2026-34792
Post summary
Only the CVE ID and its NIST CVSS score are provided; no PoC, exploit, patch, or activity details are included.
1000027
1 followersView on X
The Hacker Wire@TheHackerWire186d
Disclosure
🟠 CVE-2026-34792 - High Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_clamav.cgi. The DATE parameter value is used to con... https://www.thehackerwire.com/vulnerability/CVE-2026-34792/ https://t.co/w0M72Cn5tH
Post summary
The post reveals a new CVE (CVE‑2026‑34792) where authenticated users of Endian Firewall 3.3.25 or earlier can run arbitrary OS commands via a DATE parameter in /cgi-bin/logs_clamav.cgi.
0000045
161 followersView on X
CVE@CVEnew189d
Disclosure
CVE-2026-34792 Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_clamav.cgi. The DATE param… https://www.cve.org/CVERecord?id=CVE-2026-34792
Post summary
The text announces CVE-2026-34792, detailing an authenticated remote command execution flaw in Endian Firewall 3.3.25 and earlier, without providing PoC, exploit code, or patch information.
00000103
56.9K followersView on X
CVEFind.com@CveFindCom189d
Disclosure
[CVE-2026-34792: HIGH] Vulnerability in Endian Firewall v3.3.25 & earlier allows authenticated users to run OS commands via /cgi-bin/logs_clamav.cgi DATE parameter, exploiting incomplete validation.#cve,CVE-2026-34792,#cybersecurity https://cvefind.com/CVE-2026-34792
Post summary
This post discloses a high‑severity vulnerability in Endian Firewall (CVE‑2026‑34792) that permits authenticated users to execute OS commands through a CGI parameter, but it does not include any PoC, exploit code, mention of active exploitation, or a patch.
0000035
617 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	endian	firewall_community	-	-	-

Explore more

Back to dashboard endian CVEs firewall_community vulnerabilities

What researchers are saying

CVE-2026-34792

Firmis Labs[verified]@FirmisLabsGeneral

Only the CVE ID and its NIST CVSS score are provided; no PoC, exploit, patch, or activity details are included.

The Hacker Wire@TheHackerWireDisclosure

The post reveals a new CVE (CVE‑2026‑34792) where authenticated users of Endian Firewall 3.3.25 or earlier can run arbitrary OS commands via a DATE parameter in /cgi-bin/logs_clamav.cgi.

CVE@CVEnewDisclosure

The text announces CVE-2026-34792, detailing an authenticated remote command execution flaw in Endian Firewall 3.3.25 and earlier, without providing PoC, exploit code, or patch information.

CVEFind.com@CveFindComDisclosure

This post discloses a high‑severity vulnerability in Endian Firewall (CVE‑2026‑34792) that permits authenticated users to execute OS commands through a CGI parameter, but it does not include any PoC, exploit code, mention of active exploitation, or a patch.