CVE-2026-34792 is an OS command injection vulnerability (CWE-78) affecting Endian Firewall version 3.3.25 and prior. The issue arises because the DATE parameter passed to /cgi-bin/logs_clamav.cgi is used to build a file path in a Perl open() call without sufficient input sanitization. This allows authenticated users to inject arbitrary OS commands due to incomplete regular expression validation of the parameter. The vulnerability has a CVSS 4.0 score of 8.7, reflecting high impact and exploitability under conditions of network attack vector, low attack complexity, no user interaction, and requiring low privileges.

Successful exploitation allows an authenticated user to execute arbitrary operating system commands on the Endian Firewall device. This can lead to full system compromise, unauthorized access, and potential disruption of firewall operations. The high CVSS score reflects the significant risk posed by this vulnerability in environments where the affected version is deployed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected endpoint to trusted users only and monitor for suspicious activity. Avoid using vulnerable versions in production environments where possible.