Vulnerability: Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via routing Severity: MEDIUM Date: 2/19/2026 Affected Products: Comodo Dome Firewall <= 2.7.0 CVE ID: CVE-2019-25409 CVSS v4 Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N References: - ExploitDB-46408 - Comodo Dome Firewall Official Homepage - Comodo Dome Firewall Purchase Page Credit: Ozer Goker Description: Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the destination parameter. Attackers can send POST requests to the routing endpoint with script payloads in the destination parameter to execute arbitrary JavaScript in users' browsers.