What’s Vulnerable › Products

Smoothwall Express vulnerabilities

21 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 19 published in the last 12 months.

Check whether your Smoothwall Express version is affected

Latest Smoothwall Express vulnerabilities

CVE-2026-27508 — Smoothwall Express < 3.1 Update 13 Reflected XSS in redirect.cgi via url Parameter (CVSS 6.1)
CVE-2026-26352 — Smoothwall Express < 3.1 Update 13 Stored XSS in vpnmain.cgi via VPN_IP Parameter (CVSS 5.4)
CVE-2019-25395 — Smoothwall Express 3.1 'preferences.cgi' Cross-Site Scripting (CVSS 6.1)
CVE-2019-25394 — Smoothwall Express 3.1 'modem.cgi' Cross-Site Scripting (CVSS 6.1)
CVE-2019-25393 — Smoothwall Express 3.1 'smoothinfo.cgi' Cross-Site Scripting (CVSS 6.1)
CVE-2019-25392 — Smoothwall Express 3.1 'iptools.cgi' Cross-Site Scripting (CVSS 6.1)
CVE-2019-25390 — Smoothwall Express 3.1 'interfaces.cgi' Cross-Site Scripting (CVSS 6.1)
CVE-2019-25389 — Smoothwall Express 3.1 'timedaccess.cgi' Cross-Site Scripting (CVSS 6.1)
CVE-2019-25388 — Smoothwall Express 3.1 'ipblock.cgi' Cross-Site Scripting (CVSS 6.1)
CVE-2019-25387 — Smoothwall Express 3.1 'xtaccess.cgi' Cross-Site Scripting (CVSS 6.1)
CVE-2019-25386 — Smoothwall Express 3.1 'dmzholes.cgi' Cross-Site Scripting (CVSS 6.1)
CVE-2019-25385 — Smoothwall Express 3.1 'outgoing.cgi' Cross-Site Scripting (CVSS 6.1)
CVE-2019-25384 — Smoothwall Express 3.1 'portfw.cgi' Cross-Site Scripting (CVSS 6.1)
CVE-2019-25383 — Smoothwall Express 3.1 'apcupsd.cgi' Cross-Site Scripting (CVSS 6.1)
CVE-2019-25382 — Smoothwall Express 3.1 'time.cgi' Cross-Site Scripting (CVSS 6.1)
CVE-2019-25381 — Smoothwall Express 3.1 'hosts.cgi' Cross-Site Scripting (CVSS 6.1)
CVE-2019-25380 — Smoothwall Express 3.1 'dhcp.cgi' Cross-Site Scripting (CVSS 6.1)
CVE-2019-25379 — Smoothwall Express 3.1 'urlfilter.cgi' Cross-Site Scripting (CVSS 7.2)
CVE-2019-25378 — Smoothwall Express 3.1 'proxy.cgi' Cross-Site Scripting (CVSS 6.1)
CVE-2011-1085 — (CVSS 8.8)
CVE-2011-1084 — (CVSS 6.1)