Smoothwall Express

• CVE-2026-27508 Medium 5.4 Smoothwall Express < 3.1 Update 13 Reflected XSS in redirect.cgi via url Parameter 0.2%
• CVE-2026-26352 Medium 5.4 Smoothwall Express < 3.1 Update 13 Stored XSS in vpnmain.cgi via VPN_IP Parameter 0.1%