ISOMAN

Filtered CVEs

SmoothWall Express 3.0 x86_64 express dev CVEs

CVEs linked to release 3.0 x86_64 express dev.

All CVEsAll ISOs

Release Context

  1. SmoothWall Express · 3.0 x86_64 express dev

4 CVEs

  1. CVE-2026-27508
    MEDIUM · CVSS 5.1 ·

    Smoothwall Express versions prior to 3.1 Update 13 contain a reflected cross-site scripting vulnerability in the /redirect.cgi endpoint due to improper sanitation of the url parameter. Attackers can craft malicious URLs with javascript: schemes that execute arbitrary JavaScript in victims' browsers when clicked through the unsanitized link.

  2. CVE-2026-26352
    MEDIUM · CVSS 5.1 ·

    Smoothwall Express versions prior to 3.1 Update 13 contain a stored cross-site scripting vulnerability in the /cgi-bin/vpnmain.cgi script due to improper sanitation of the VPN_IP parameter. Authenticated attackers can inject arbitrary JavaScript through VPN configuration settings that executes when the affected page is viewed by other users.

  3. CVE-2011-1085
    HIGH · CVSS 8.8 ·

    CSRF vulnerability in Smoothwall Express 3.

  4. CVE-2011-1084
    MEDIUM · CVSS 6.1 ·

    A cross-site scripting (XSS) vulnerability in Smoothwall Express 3.