CVE-2026-34822 is a stored cross-site scripting (CWE-79) vulnerability affecting Endian Firewall version 3.3.25 and prior. The issue arises from improper neutralization of input in the new_cert_name parameter on the /manage/ca/certificate/ endpoint. An attacker with authentication privileges can inject malicious JavaScript code that is persistently stored and executed in the context of other users viewing the affected page, potentially leading to session hijacking or other script-based attacks. The vulnerability has a CVSS 4.0 base score of 5.1, indicating medium severity. There is no indication that this vulnerability affects cloud services, and no known exploits in the wild have been reported. No patch or official fix has been documented in the provided information.

Successful exploitation allows an authenticated attacker to inject and store arbitrary JavaScript code that executes in the browsers of other users who view the affected page. This can lead to typical XSS impacts such as session hijacking, unauthorized actions in the context of the victim user, or information disclosure. The vulnerability requires authentication and user interaction (viewing the affected page). No evidence of remote unauthenticated exploitation or privilege escalation is provided.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, limit access to the affected functionality to trusted users only and consider monitoring for suspicious activity related to certificate management pages. Avoid clicking or interacting with untrusted inputs in the new_cert_name parameter. Follow up with Endian for any updates or patches addressing this vulnerability.