CVE-2026-27508: Smoothwall Express < 3.1 Update 13 Reflected XSS in redirect.cgi via url Parameter

Published Mar 30, 2026
·
Updated

Smoothwall Express versions prior to 3.1 Update 13 contain a reflected cross-site scripting vulnerability in the /redirect.cgi endpoint due to improper sanitation of the url parameter. Attackers can craft malicious URLs with javascript: schemes that execute arbitrary JavaScript in victims' browsers when clicked through the unsanitized link.

Affected Software

14 affected components
Smoothwall Smoothwall Express<3.1 Update 13
Smoothwall Smoothwall Express<=3.0
Smoothwall Smoothwall Express=3.1-update1
Smoothwall Smoothwall Express=3.1-update10
Smoothwall Smoothwall Express=3.1-update11
Smoothwall Smoothwall Express=3.1-update12
Smoothwall Smoothwall Express=3.1-update2
Smoothwall Smoothwall Express=3.1-update3
Smoothwall Smoothwall Express=3.1-update4
Smoothwall Smoothwall Express=3.1-update5
Smoothwall Smoothwall Express=3.1-update6
Smoothwall Smoothwall Express=3.1-update7
Smoothwall Smoothwall Express=3.1-update8
Smoothwall Smoothwall Express=3.1-update9

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade Smoothwall Express to a version that resolves this vulnerability.

    Fixed in 3.1 Update 13

Event History

Mar 30, 2026
CVE Published
via MITRE·04:51 PM
Data Sourced
via MITRE·04:51 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:16 PM
DescriptionSeverityWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2026-27508?

CVE-2026-27508 is classified as a medium severity vulnerability due to its potential for reflected cross-site scripting attacks.

2

How do I fix CVE-2026-27508?

To fix CVE-2026-27508, update Smoothwall Express to version 3.1 Update 13 or later.

3

What systems are affected by CVE-2026-27508?

CVE-2026-27508 affects Smoothwall Express versions prior to 3.1 Update 13.

4

What type of vulnerability is CVE-2026-27508?

CVE-2026-27508 is a reflected cross-site scripting (XSS) vulnerability.

5

What can attackers do with CVE-2026-27508?

Attackers can exploit CVE-2026-27508 to execute malicious scripts in the context of a user’s session.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203