<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="rss.xsl"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Hillstone Networks Inc. — recent CVEs</title>
    <link>https://vulnogram.org/</link>
    <atom:link href="https://vulnogram.org/rss/hillstone" rel="self" type="application/rss+xml"/>
    <description>Most recent CVEs assigned by Hillstone Networks Inc. (hillstone).</description>
    <image>
      <url>https://vulnogram.org/seaview/icons/hillstone.png</url>
      <title>Hillstone Networks Inc. — recent CVEs</title>
      <link>https://vulnogram.org/</link>
    </image>
    <lastBuildDate>Wed, 21 Oct 2026 07:00:07 GMT</lastBuildDate>
    <item>
      <title>CVE-2026-1791 · 2.7 LOW — Arbitrary File Upload Vulnerability in Operation and Maintenance Security Gateway</title>
      <link>https://vulnogram.org/CVE-2026-1791</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-1791</guid>
      <description>Unrestricted Upload of File with Dangerous Type vulnerability in Hillstone Networks Operation and Maintenance Security Gateway on Linux allows Upload a Web Shell to a Web Server.This issue affects Operation and Maintenance Security Gateway: V5.5ST000…</description>
      <category>Low</category>
      <pubDate>Wed, 04 Feb 2026 03:11:30 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-2239 · 5.3 MEDIUM 🌩️ — Absolute Path Disclosure Vulnerability in Hillstone Next Generation FireWall</title>
      <link>https://vulnogram.org/CVE-2025-2239</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-2239</guid>
      <description>Generation of Error Message Containing Sensitive Information vulnerability in Hillstone Networks Hillstone Next Generation FireWall.This issue affects Hillstone Next Generation FireWall: from 5.5R8P1 before 5.5R8P23.</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 12 Mar 2025 09:53:35 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2024-8073 · 9.8 CRITICAL 🌩️ — Command Injection Vulnerability in Hillstone Networks Web Application Firewall</title>
      <link>https://vulnogram.org/CVE-2024-8073</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2024-8073</guid>
      <description>Improper Input Validation vulnerability in Hillstone Networks Hillstone Networks Web Application Firewall on 5.5R6 allows Command Injection.This issue affects Hillstone Networks Web Application Firewall: from 5.5R6-2.6.7 through 5.5R6-2.8.13.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Mon, 26 Aug 2024 02:19:48 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-46964</title>
      <link>https://vulnogram.org/CVE-2023-46964</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-46964</guid>
      <description>Cross Site Scripting (XSS) vulnerability in Hillstone Next Generation FireWall SG-6000-e3960 v.5.5 allows a remote attacker to execute arbitrary code via the use front-end filtering instead of back-end filtering.</description>
      <pubDate>Sat, 04 Nov 2023 00:00:00 GMT</pubDate>
    </item>
  </channel>
</rss>
