CVE-2007-3786: Esoft Instagate EX2 UTM

High severity, CVSS 9.3. EPSS: 2.5% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability on the eSoft InstaGate EX2 UTM device before firmware 3.1.20070615 allows remote attackers to perform privileged actions as administrators. NOTE: the vendor disputes the distribution of the vulnerable software, stating that it was a custom build for a former customer

Affected products

• Esoft Instagate EX2 UTM: version firmware_3.1.20031001 only; version firmware_3.1.20060921 only; version firmware_3.1.20070605 only

Published 2007-07-15. Last modified 2026-06-16.