Search
Find a vulnerability
Search criteria
7 vulnerabilities found for Stormshield Network Security by Stormshield
CVE-2026-113469 (GCVE-0-2026-113469)
Vulnerability from cvelistv5 – Published: 2026-10-20 08:29 – Updated: 2026-10-20 08:29
VLAI
EPSS
VEX
Title
Improper Signature Verification of Active Update Files
Summary
A failure has been identified in the SNS during dynamic data files signature check.
A logic error in the signature verification routine resulting in acceptance of unauthenticated dynamic data update during Autoupdate routine.
Severity
7.5 (High)
CWE
- CWE-287 - Improper Authentication
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Stormshield | Stormshield Network Security |
Affected:
4.3.0 , ≤ 4.3.44
(semver)
Affected: 4.8.0 , ≤ 4.8.19 (semver) Affected: 5.0.0 , ≤ 5.0.9 (semver) Affected: 5.1.0 , ≤ 5.1.3 (semver) Unaffected: 4.8.20 LTSB (semver) Unaffected: 5.0.10 (semver) Unaffected: 5.1.4 EA |
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Stormshield Network Security",
"vendor": "Stormshield",
"versions": [
{
"lessThanOrEqual": "4.3.44",
"status": "affected",
"version": "4.3.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "4.8.19",
"status": "affected",
"version": "4.8.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.0.9",
"status": "affected",
"version": "5.0.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.1.3",
"status": "affected",
"version": "5.1.0",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "4.8.20 LTSB",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "5.0.10",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "5.1.4 EA"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eA failure has been identified in the SNS during dynamic data files signature check.\u003c/p\u003e\u003cp\u003eA logic error in the signature verification routine resulting in acceptance of unauthenticated dynamic data update during Autoupdate routine.\u003c/p\u003e"
}
],
"value": "A failure has been identified in the SNS during dynamic data files signature check.\n\n\n\nA logic error in the signature verification routine resulting in acceptance of unauthenticated dynamic data update during Autoupdate routine."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-287",
"description": "CWE-287: Improper Authentication",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-20T08:29:49.095Z",
"orgId": "24a3c815-5f22-4d74-967a-30958d6466f4",
"shortName": "airbus"
},
"references": [
{
"url": "https://advisories.stormshield.eu/2026-032/"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eThe following updates will fix this vulnerability:\u003c/p\u003e\u003cul\u003e\u003cli\u003eSNS 5.1.4 EA\u003c/li\u003e\u003cli\u003eSNS 5.0.10\u003c/li\u003e\u003cli\u003eSNS 4.8.20 LTSB\u003c/li\u003e\u003c/ul\u003e"
}
],
"value": "The following updates will fix this vulnerability:\n\n * SNS 5.1.4 EA\n * SNS 5.0.10\n * SNS 4.8.20 LTSB"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Improper Signature Verification of Active Update Files",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cul\u003e\u003cli\u003eUse only official Stormshield update servers or SMC mirror servers, if configured, ensuring that HTTPS is enabled.\u003c/li\u003e\u003cli\u003eIf you use custom update servers, ensure that HTTPS is enabled and verify that the SHA-256 hashes of the files hosted on your servers match those obtained from the official Stormshield update servers.\u003c/li\u003e\u003c/ul\u003e"
}
],
"value": "* Use only official Stormshield update servers or SMC mirror servers, if configured, ensuring that HTTPS is enabled.\n * If you use custom update servers, ensure that HTTPS is enabled and verify that the SHA-256 hashes of the files hosted on your servers match those obtained from the official Stormshield update servers."
}
],
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "24a3c815-5f22-4d74-967a-30958d6466f4",
"assignerShortName": "airbus",
"cveId": "CVE-2026-113469",
"datePublished": "2026-10-20T08:29:49.095Z",
"dateReserved": "2026-10-20T08:23:20.615Z",
"dateUpdated": "2026-10-20T08:29:49.095Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-113465 (GCVE-0-2026-113465)
Vulnerability from cvelistv5 – Published: 2026-10-20 08:09 – Updated: 2026-10-20 08:09
VLAI
EPSS
VEX
Title
Possible DOM XSS in SNS Web Administration Portal
Summary
It is possible to execute a DOM-based Cross-Site Scripting attack against Stormshield’s web administration panel.
To exploit this vulnerability, an attacker would need to craft a URL containing a malicious script payload within a specific parameter and lure an authenticated administrator into visiting that link.
Severity
6.6 (Medium)
CWE
- CWE-79 - Improper neutralization of input during web page generation ('cross-site scripting')
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Stormshield | Stormshield Network Security |
Affected:
5.0.0 , ≤ 5.0.9
(semver)
Affected: 5.1.0 , ≤ 5.1.3 (semver) Unaffected: 5.0.10 (semver) Unaffected: 5.1.4 EA (semver) |
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Stormshield Network Security",
"vendor": "Stormshield",
"versions": [
{
"lessThanOrEqual": "5.0.9",
"status": "affected",
"version": "5.0.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.1.3",
"status": "affected",
"version": "5.1.0",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "5.0.10",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "5.1.4 EA",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "We acknowledge the researcher kto94 for discovering this vulnerability."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIt is possible to execute a DOM-based Cross-Site Scripting attack against Stormshield\u2019s web administration panel.\u003c/p\u003e\u003cp\u003eTo exploit this vulnerability, an attacker would need to craft a URL containing a malicious script payload within a specific parameter and lure an authenticated administrator into visiting that link.\u003c/p\u003e"
}
],
"value": "It is possible to execute a DOM-based Cross-Site Scripting attack against Stormshield\u2019s web administration panel.\n\n\n\nTo exploit this vulnerability, an attacker would need to craft a URL containing a malicious script payload within a specific parameter and lure an authenticated administrator into visiting that link."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "CWE-79 Improper neutralization of input during web page generation (\u0027cross-site scripting\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-20T08:09:33.956Z",
"orgId": "24a3c815-5f22-4d74-967a-30958d6466f4",
"shortName": "airbus"
},
"references": [
{
"url": "https://advisories.stormshield.eu/2026-022/"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The following updates will fix this vulnerability:\u003cbr\u003e\u003cul\u003e\u003cli\u003eSNS 5.1.4 EA\n\u003c/li\u003e\u003cli\u003eSNS 5.0.10\u003c/li\u003e\u003c/ul\u003e"
}
],
"value": "The following updates will fix this vulnerability:\n * SNS 5.1.4 EA\n\n * SNS 5.0.10"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Possible DOM XSS in SNS Web Administration Portal",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "There is no workaround solution."
}
],
"value": "There is no workaround solution."
}
],
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "24a3c815-5f22-4d74-967a-30958d6466f4",
"assignerShortName": "airbus",
"cveId": "CVE-2026-113465",
"datePublished": "2026-10-20T08:09:33.956Z",
"dateReserved": "2026-10-20T08:03:11.466Z",
"dateUpdated": "2026-10-20T08:09:33.956Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-111090 (GCVE-0-2026-111090)
Vulnerability from cvelistv5 – Published: 2026-10-20 07:42 – Updated: 2026-10-20 07:42
VLAI
EPSS
VEX
Title
Improper Signature Verification of Firmware Update Files
Summary
A logic error exists in the signature verification routine resulting in acceptance of unauthenticated update and license files.It is necessary to use only the MyStormshield servers to retrieve update files or licenses, or to use automatic verification via SNS.
Severity
7.8 (High)
CWE
- CWE-287 - Improper Authentication
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Stormshield | Stormshield Network Security |
Affected:
4.3.0 , ≤ 4.3.44
(semver)
Affected: 4.8.0 , ≤ 4.8.19 (semver) Affected: 5.0.0 , ≤ 5.0.9 (semver) Affected: 5.1.0 , ≤ 5.1.3 (semver) Unaffected: 4.8.20 LTSB (semver) Unaffected: 5.0.10 (semver) Unaffected: 5.1.4 EA (semver) |
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Stormshield Network Security",
"vendor": "Stormshield",
"versions": [
{
"lessThanOrEqual": "4.3.44",
"status": "affected",
"version": "4.3.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "4.8.19",
"status": "affected",
"version": "4.8.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.0.9",
"status": "affected",
"version": "5.0.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.1.3",
"status": "affected",
"version": "5.1.0",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "4.8.20 LTSB",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "5.0.10",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "5.1.4 EA",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A logic error exists in the signature verification routine resulting in acceptance of unauthenticated update and license files.\u003cdiv\u003eIt is necessary to use only the MyStormshield servers to retrieve update files or licenses, or to use automatic verification via SNS.\u003c/div\u003e"
}
],
"value": "A logic error exists in the signature verification routine resulting in acceptance of unauthenticated update and license files.It is necessary to use only the MyStormshield servers to retrieve update files or licenses, or to use automatic verification via SNS."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-287",
"description": "CWE-287: Improper Authentication",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-20T07:42:53.842Z",
"orgId": "24a3c815-5f22-4d74-967a-30958d6466f4",
"shortName": "airbus"
},
"references": [
{
"url": "https://advisories.stormshield.eu/2026-031/"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003e\u003cspan\u003eThe following updates will fix this vulnerability:\u003c/span\u003e\u003c/p\u003e\u003cp\u003e\u003cb\u003e\u003c/b\u003e\u003c/p\u003e\u003cul\u003e\u003cli\u003e\u003cp\u003e\u003cspan\u003eSNS 5.1.4 EA\u003c/span\u003e\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003e\u003cspan\u003eSNS 5.0.10\u003c/span\u003e\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003e\u003cspan\u003eSNS 4.8.20 LTSB\u003c/span\u003e\u003c/p\u003e\u003c/li\u003e\u003c/ul\u003e"
}
],
"value": "The following updates will fix this vulnerability:\n\n\n\n\n\n * \n\nSNS 5.1.4 EA\n\n\n * \n\nSNS 5.0.10\n\n\n * \n\nSNS 4.8.20 LTSB"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Improper Signature Verification of Firmware Update Files",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "If applicable, verify the SHA-256 hash of each update file. The reference hashes are available in the MyStormshield portal"
}
],
"value": "If applicable, verify the SHA-256 hash of each update file. The reference hashes are available in the MyStormshield portal"
}
],
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "24a3c815-5f22-4d74-967a-30958d6466f4",
"assignerShortName": "airbus",
"cveId": "CVE-2026-111090",
"datePublished": "2026-10-20T07:42:53.842Z",
"dateReserved": "2026-10-15T15:01:46.698Z",
"dateUpdated": "2026-10-20T07:42:53.842Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-14466 (GCVE-0-2026-14466)
Vulnerability from cvelistv5 – Published: 2026-09-04 14:27 – Updated: 2026-09-04 14:41
VLAI
EPSS
VEX
Title
Possible XSS in the SNS web administration panel
Summary
It’s possible to run a stored XSS in Stormshield’s web administration panel.
To exploit this vulnerability, a SNS administrator with appropriate permissions must inject some malicious script in a group’s comments in the webservices administration interface.
Severity
4.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-04 14:40 UTC
CWE
- CWE-79 - Improper neutralization of input during web page generation ('cross-site scripting')
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Stormshield | Stormshield Network Security |
Affected:
4.8.0 , ≤ 4.8.16
(semver)
Affected: 5.0.0 , ≤ 5.0.6 (semver) Unaffected: 4.8.17 (semver) Unaffected: 5.0.7 (semver) Unaffected: 5.1.0 (semver) |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-14466",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-04T14:40:47.477086Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-04T14:41:07.268Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Stormshield Network Security",
"vendor": "Stormshield",
"versions": [
{
"lessThanOrEqual": "4.8.16",
"status": "affected",
"version": "4.8.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.0.6",
"status": "affected",
"version": "5.0.0",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "4.8.17",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "5.0.7",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "5.1.0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "We acknowledge the researcher Supr4s for discovering this vulnerability."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIt\u2019s possible to run a stored XSS in Stormshield\u2019s web administration panel.\u003c/p\u003e\u003cp\u003eTo exploit this vulnerability, a SNS administrator with appropriate permissions must inject\u0026nbsp; some malicious script in a group\u2019s comments in the webservices administration interface.\u003c/p\u003e"
}
],
"value": "It\u2019s possible to run a stored XSS in Stormshield\u2019s web administration panel.\n\n\n\nTo exploit this vulnerability, a SNS administrator with appropriate permissions must inject\u00a0 some malicious script in a group\u2019s comments in the webservices administration interface."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "CWE-79 Improper neutralization of input during web page generation (\u0027cross-site scripting\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-04T14:32:28.756Z",
"orgId": "24a3c815-5f22-4d74-967a-30958d6466f4",
"shortName": "airbus"
},
"references": [
{
"url": "https://advisories.stormshield.eu/2026-006"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eThe following updates will fix this vulnerability:\u003c/p\u003e\u003cul\u003e\u003cli\u003eSNS 5.1.0\u003c/li\u003e\u003cli\u003eSNS 5.0.7\u003c/li\u003e\u003cli\u003eSNS 4.8.17\u003c/li\u003e\u003c/ul\u003e"
}
],
"value": "The following updates will fix this vulnerability:\n\n * SNS 5.1.0\n * SNS 5.0.7\n * SNS 4.8.17"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Possible XSS in the SNS web administration panel",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "24a3c815-5f22-4d74-967a-30958d6466f4",
"assignerShortName": "airbus",
"cveId": "CVE-2026-14466",
"datePublished": "2026-09-04T14:27:58.190Z",
"dateReserved": "2026-07-02T12:42:10.025Z",
"dateUpdated": "2026-09-04T14:41:07.268Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-8482 (GCVE-0-2026-8482)
Vulnerability from cvelistv5 – Published: 2026-07-02 08:42 – Updated: 2026-07-02 12:20
VLAI
EPSS
VEX
Title
Information leak in NSRPC client history
Summary
A vulnerability was discovered on StormShield Network Security 4.3.0 to 4.3.41 (included), 4.8.0 to 4.8.15 (included) , 5.0.0 to 5.0.5 (included)
There is a possible leak of secret information if administration commands have been passed with the CLI command line tool.
Someone with SSH access to the firewall (if SSH multiuser mode is enabled) could possibly get the proxy CA passphrase or TPM password.
Severity
4.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-07-02 12:20 UTC
CWE
- CWE-532 - Insertion of sensitive information into log file
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Stormshield | Stormshield Network Security |
Affected:
4.3.0 , ≤ 4.3.41
(semver)
Affected: 4.8.0 , ≤ 4.8.15 (semver) Affected: 5.0.0 , ≤ 5.0.5 (semver) |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-8482",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-02T12:20:06.574781Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-07-02T12:20:17.839Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Stormshield Network Security",
"vendor": "Stormshield",
"versions": [
{
"lessThanOrEqual": "4.3.41",
"status": "affected",
"version": "4.3.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "4.8.15",
"status": "affected",
"version": "4.8.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.0.5",
"status": "affected",
"version": "5.0.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A vulnerability was discovered on StormShield Network Security 4.3.0 to 4.3.41 (included), 4.8.0 to 4.8.15 (included) , 5.0.0 to 5.0.5 (included)\n\u003cbr\u003eThere is a possible leak of secret information if administration commands have been passed with the CLI command line tool.\n\u003cbr\u003eSomeone with SSH access to the firewall (if SSH multiuser mode is enabled) could possibly get the proxy CA passphrase or TPM password.\u0026nbsp;\u003cbr\u003e"
}
],
"value": "A vulnerability was discovered on StormShield Network Security 4.3.0 to 4.3.41 (included), 4.8.0 to 4.8.15 (included) , 5.0.0 to 5.0.5 (included)\n\nThere is a possible leak of secret information if administration commands have been passed with the CLI command line tool.\n\nSomeone with SSH access to the firewall (if SSH multiuser mode is enabled) could possibly get the proxy CA passphrase or TPM password."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-532",
"description": "CWE-532 Insertion of sensitive information into log file",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-02T08:42:56.777Z",
"orgId": "24a3c815-5f22-4d74-967a-30958d6466f4",
"shortName": "airbus"
},
"references": [
{
"url": "https://advisories.stormshield.eu/2025-007/"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The following updates fix this vulnerability:\u003cbr\u003e\u003cul\u003e\u003cli\u003eSNS 5.0.6\n\u003c/li\u003e\u003cli\u003eSNS 4.8.16\n\u003c/li\u003e\u003cli\u003eSNS 4.3.42\u003c/li\u003e\u003c/ul\u003e"
}
],
"value": "The following updates fix this vulnerability:\n * SNS 5.0.6\n\n * SNS 4.8.16\n\n * SNS 4.3.42"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Information leak in NSRPC client history",
"x_generator": {
"engine": "Vulnogram 1.0.2"
}
}
},
"cveMetadata": {
"assignerOrgId": "24a3c815-5f22-4d74-967a-30958d6466f4",
"assignerShortName": "airbus",
"cveId": "CVE-2026-8482",
"datePublished": "2026-07-02T08:42:56.777Z",
"dateReserved": "2026-05-13T14:04:22.661Z",
"dateUpdated": "2026-07-02T12:20:17.839Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-8480 (GCVE-0-2026-8480)
Vulnerability from cvelistv5 – Published: 2026-07-01 14:52 – Updated: 2026-07-01 15:45
VLAI
EPSS
VEX
Title
Connection possible to the Administration portal with a revoked certificate
Summary
A vulnerability was discovered on Stormshield Network Security 4.3.0 to 4.3.41 (included), 4.4.0 to 4.8.15 (included) , 5.0.2 EA to 5.0.5 (included)
A revoked client certificate can still be used to authenticate to the captive‑admin portal, allowing an attacker who possesses the revoked certificate to gain administrative access.
Severity
4.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-07-01 15:44 UTC
CWE
- CWE-295 - Improper certificate validation
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Stormshield | Stormshield Network Security |
Affected:
4.3.0 , ≤ 4.3.41
(semver)
Affected: 4.4.0 , ≤ 4.8.15 (semver) Affected: 5.0.2 EA , ≤ 5.0.5 (semver) |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-8480",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-01T15:44:58.262034Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-07-01T15:45:32.124Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Stormshield Network Security",
"vendor": "Stormshield",
"versions": [
{
"lessThanOrEqual": "4.3.41",
"status": "affected",
"version": "4.3.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "4.8.15",
"status": "affected",
"version": "4.4.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.0.5",
"status": "affected",
"version": "5.0.2 EA",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eA vulnerability was discovered on Stormshield Network Security 4.3.0\u0026nbsp; to 4.3.41 (included), 4.4.0 to 4.8.15 (included) , 5.0.2 EA to 5.0.5 (included)\u003c/p\u003e\u003cp\u003eA revoked client certificate can still be used to authenticate to the captive\u2011admin portal, allowing an attacker who possesses the revoked certificate to gain administrative access.\u003c/p\u003e\u003cbr\u003e"
}
],
"value": "A vulnerability was discovered on Stormshield Network Security 4.3.0\u00a0 to 4.3.41 (included), 4.4.0 to 4.8.15 (included) , 5.0.2 EA to 5.0.5 (included)\n\n\n\nA revoked client certificate can still be used to authenticate to the captive\u2011admin portal, allowing an attacker who possesses the revoked certificate to gain administrative access."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-295",
"description": "CWE-295 Improper certificate validation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-01T14:52:12.815Z",
"orgId": "24a3c815-5f22-4d74-967a-30958d6466f4",
"shortName": "airbus"
},
"references": [
{
"url": "https://advisories.stormshield.eu/2026-002/"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The following updates fix this vulnerability:\u003cbr\u003e\u003cul\u003e\u003cli\u003eSNS 5.0.6\n\u003c/li\u003e\u003cli\u003eSNS 4.8.16\n\u003c/li\u003e\u003cli\u003eSNS 4.3.42\u003c/li\u003e\u003c/ul\u003e"
}
],
"value": "The following updates fix this vulnerability:\n * SNS 5.0.6\n\n * SNS 4.8.16\n\n * SNS 4.3.42"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Connection possible to the Administration portal with a revoked certificate",
"x_generator": {
"engine": "Vulnogram 1.0.2"
}
}
},
"cveMetadata": {
"assignerOrgId": "24a3c815-5f22-4d74-967a-30958d6466f4",
"assignerShortName": "airbus",
"cveId": "CVE-2026-8480",
"datePublished": "2026-07-01T14:52:12.815Z",
"dateReserved": "2026-05-13T13:48:21.232Z",
"dateUpdated": "2026-07-01T15:45:32.124Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-8474 (GCVE-0-2026-8474)
Vulnerability from cvelistv5 – Published: 2026-06-01 07:47 – Updated: 2026-06-01 13:05
VLAI
EPSS
VEX
Title
Possible to run a Cross Site Scripting request on the login API available on Stormshield SNS appliances.
Summary
A vulnerability was discovered on Stormshield Network Security
* 4.3.0 to 4.3.41,
* 4.8.0 to 4.8.15,
* 5.0.0 to 5.0.5
It is possible to execute a reflected XSS attack on the login API available on Stormshield SNS appliance by executing a script on the victim's machine. The risks include the theft of cookies or other sensitive data, as well as the modification of page behavior, for example, by redirecting the victim to malicious websites.
Severity
5.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-06-01 13:05 UTC
CWE
- CWE-79 - Improper neutralization of input during web page generation ('cross-site scripting')
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| StormShield | StormShield Network Security |
Affected:
4.3.0 , ≤ 4.3.41
(semver)
Affected: 4.8.0 , ≤ 4.8.15 (semver) Affected: 5.0.0 , ≤ 5.0.5 (semver) |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-8474",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-01T13:05:31.957702Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-01T13:05:45.399Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "StormShield Network Security",
"vendor": "StormShield",
"versions": [
{
"lessThanOrEqual": "4.3.41",
"status": "affected",
"version": "4.3.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "4.8.15",
"status": "affected",
"version": "4.8.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.0.5",
"status": "affected",
"version": "5.0.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eA vulnerability was discovered on Stormshield Network Security\u0026nbsp;\u003c/p\u003e\u003cp\u003e\u003c/p\u003e\u003cul\u003e\u003cli\u003e4.3.0 to 4.3.41,\u0026nbsp;\u003c/li\u003e\u003cli\u003e4.8.0 to 4.8.15,\u0026nbsp;\u003c/li\u003e\u003cli\u003e5.0.0 to 5.0.5\u003c/li\u003e\u003c/ul\u003e\u003cp\u003e\u003c/p\u003e\u003cp\u003eIt is possible to execute a reflected XSS attack on the login API available on Stormshield SNS appliance by executing a script on the victim\u0027s machine. The risks include the theft of cookies or other sensitive data, as well as the modification of page behavior, for example, by redirecting the victim to malicious websites.\u003c/p\u003e"
}
],
"value": "A vulnerability was discovered on Stormshield Network Security\u00a0\n\n\n\n\n\n * 4.3.0 to 4.3.41,\u00a0\n * 4.8.0 to 4.8.15,\u00a0\n * 5.0.0 to 5.0.5\n\n\n\n\n\n\n\n\nIt is possible to execute a reflected XSS attack on the login API available on Stormshield SNS appliance by executing a script on the victim\u0027s machine. The risks include the theft of cookies or other sensitive data, as well as the modification of page behavior, for example, by redirecting the victim to malicious websites."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "CWE-79 Improper neutralization of input during web page generation (\u0027cross-site scripting\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-01T07:50:04.199Z",
"orgId": "24a3c815-5f22-4d74-967a-30958d6466f4",
"shortName": "airbus"
},
"references": [
{
"url": "https://advisories.stormshield.eu/2026-003/"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eThe following updates fix this vulnerability:\u003c/p\u003e\u003cul\u003e\u003cli\u003eSNS 5.0.6\u003c/li\u003e\u003cli\u003eSNS 4.8.16\u003c/li\u003e\u003cli\u003eSNS 4.3.42\u003c/li\u003e\u003c/ul\u003e"
}
],
"value": "The following updates fix this vulnerability:\n\n * SNS 5.0.6\n * SNS 4.8.16\n * SNS 4.3.42"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Possible to run a Cross Site Scripting request on the login API available on Stormshield SNS appliances.",
"x_generator": {
"engine": "Vulnogram 1.0.2"
}
}
},
"cveMetadata": {
"assignerOrgId": "24a3c815-5f22-4d74-967a-30958d6466f4",
"assignerShortName": "airbus",
"cveId": "CVE-2026-8474",
"datePublished": "2026-06-01T07:47:54.875Z",
"dateReserved": "2026-05-13T13:10:26.492Z",
"dateUpdated": "2026-06-01T13:05:45.399Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}