SM
Vendor
Smoothwall
32
CVEs
0
On KEV
0
New 30D
Products
SE8.8
Smoothwall Express
Smoothwall
21 CVEs0 on KEV0 new
SM–
Smoothwall
Smoothwall
6 CVEs0 on KEV0 new
EX6.1
Express
Smoothwall
2 CVEs0 on KEV0 new
NE–
Networkguardian
Smoothwall
1 CVEs0 on KEV0 new
SC–
Schoolguardian
Smoothwall
1 CVEs0 on KEV0 new
SM–
Smoothguardian
Smoothwall
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-27508 | EX Express Smoothwall | 6.1 | Mar 30 | Smoothwall Express < 3.1 Update 13 Reflected XSS in redirect.cgi via url Parameter |
| CVE-2026-26352 | EX Express Smoothwall | 5.4 | Mar 30 | Smoothwall Express < 3.1 Update 13 Stored XSS in vpnmain.cgi via VPN_IP Parameter |
| CVE-2019-25395 | SE Smoothwall Express Smoothwall | 6.1 | Feb 16 | Smoothwall Express 3.1 'preferences.cgi' Cross-Site Scripting |
| CVE-2019-25394 | SE Smoothwall Express Smoothwall | 6.1 | Feb 16 | Smoothwall Express 3.1 'modem.cgi' Cross-Site Scripting |
| CVE-2019-25393 | SE Smoothwall Express Smoothwall | 6.1 | Feb 16 | Smoothwall Express 3.1 'smoothinfo.cgi' Cross-Site Scripting |
| CVE-2019-25392 | SE Smoothwall Express Smoothwall | 6.1 | Feb 16 | Smoothwall Express 3.1 'iptools.cgi' Cross-Site Scripting |
| CVE-2019-25390 | SE Smoothwall Express Smoothwall | 6.1 | Feb 16 | Smoothwall Express 3.1 'interfaces.cgi' Cross-Site Scripting |
| CVE-2019-25389 | SE Smoothwall Express Smoothwall | 6.1 | Feb 16 | Smoothwall Express 3.1 'timedaccess.cgi' Cross-Site Scripting |
| CVE-2019-25388 | SE Smoothwall Express Smoothwall | 6.1 | Feb 16 | Smoothwall Express 3.1 'ipblock.cgi' Cross-Site Scripting |
| CVE-2019-25387 | SE Smoothwall Express Smoothwall | 6.1 | Feb 16 | Smoothwall Express 3.1 'xtaccess.cgi' Cross-Site Scripting |
| CVE-2019-25386 | SE Smoothwall Express Smoothwall | 6.1 | Feb 16 | Smoothwall Express 3.1 'dmzholes.cgi' Cross-Site Scripting |
| CVE-2019-25385 | SE Smoothwall Express Smoothwall | 6.1 | Feb 16 | Smoothwall Express 3.1 'outgoing.cgi' Cross-Site Scripting |
| CVE-2019-25384 | SE Smoothwall Express Smoothwall | 6.1 | Feb 16 | Smoothwall Express 3.1 'portfw.cgi' Cross-Site Scripting |
| CVE-2019-25383 | SE Smoothwall Express Smoothwall | 6.1 | Feb 16 | Smoothwall Express 3.1 'apcupsd.cgi' Cross-Site Scripting |
| CVE-2019-25382 | SE Smoothwall Express Smoothwall | 6.1 | Feb 16 | Smoothwall Express 3.1 'time.cgi' Cross-Site Scripting |
| CVE-2019-25381 | SE Smoothwall Express Smoothwall | 6.1 | Feb 16 | Smoothwall Express 3.1 'hosts.cgi' Cross-Site Scripting |
| CVE-2019-25380 | SE Smoothwall Express Smoothwall | 6.1 | Feb 16 | Smoothwall Express 3.1 'dhcp.cgi' Cross-Site Scripting |
| CVE-2019-25379 | SE Smoothwall Express Smoothwall | 7.2 | Feb 16 | Smoothwall Express 3.1 'urlfilter.cgi' Cross-Site Scripting |
| CVE-2019-25378 | SE Smoothwall Express Smoothwall | 6.1 | Feb 16 | Smoothwall Express 3.1 'proxy.cgi' Cross-Site Scripting |
| CVE-2011-1085 | SE Smoothwall Express Smoothwall | 8.8 | Feb 7 | CSRF vulnerability in Smoothwall Express 3 |
| CVE-2011-1084 | SE Smoothwall Express Smoothwall | 6.1 | Feb 7 | A cross-site scripting (XSS) vulnerability in Smoothwall Express 3 |
| CVE-2014-9431 | SM Smoothwall Smoothwall | – | Dec 31 | Multiple cross-site request forgery (CSRF) vulnerabilities in Smoothwall Express 3.1 and 3.0 SP3 allow remote attackers to hijack the authentication of administrators for requests… |
| CVE-2014-9430 | SM Smoothwall Smoothwall | – | Dec 31 | Cross-site scripting (XSS) vulnerability in httpd/cgi-bin/vpn.cgi/vpnconfig.dat in Smoothwall Express 3.0 SP3 allows remote attackers to inject arbitrary web script or HTML via… |
| CVE-2014-9429 | SM Smoothwall Smoothwall | – | Dec 31 | Multiple cross-site scripting (XSS) vulnerabilities in Smoothwall Express 3.1 and 3.0 SP3 allow remote attackers to inject arbitrary web script or HTML via the (1) PROFILENAME… |
| CVE-2011-5284 | SM Smoothwall Smoothwall | – | Dec 31 | Cross-site request forgery (CSRF) vulnerability in the web management interface in httpd/cgi-bin/shutdown.cgi in Smoothwall Express 3.1 and 3.0 SP3 and earlier allows remote… |
| CVE-2011-5283 | SM Smoothwall Smoothwall | – | Dec 31 | Cross-site scripting (XSS) vulnerability in the web management interface in httpd/cgi-bin/ipinfo.cgi in Smoothwall Express 3.1 and 3.0 SP3 and earlier allows remote attackers to… |
| CVE-2009-0803 | NE Networkguardian Smoothwall | – | Mar 4 | SmoothWall SmoothGuardian, as used in SmoothWall Firewall, NetworkGuardian, and SchoolGuardian 2008, when transparent interception mode is enabled, uses the HTTP Host header to… |
| CVE-2003-0209 | SM Smoothwall Smoothwall | – | May 5 | Integer overflow in the TCP stream reassembly module (stream4) for Snort 2.0 and earlier allows remote attackers to execute arbitrary code via large sequence numbers in packets,… |
