CVE-2026-8474 (GCVE-0-2026-8474)

Vulnerability from cvelistv5 – Published: 2026-06-01 07:47 – Updated: 2026-06-01 13:05
VLAI
Title
Possible to run a Cross Site Scripting request on the login API available on Stormshield SNS appliances.
Summary
A vulnerability was discovered on Stormshield Network Security  * 4.3.0 to 4.3.41,  * 4.8.0 to 4.8.15,  * 5.0.0 to 5.0.5 It is possible to execute a reflected XSS attack on the login API available on Stormshield SNS appliance by executing a script on the victim's machine. The risks include the theft of cookies or other sensitive data, as well as the modification of page behavior, for example, by redirecting the victim to malicious websites.
Severity
5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
  • CWE-79 - Improper neutralization of input during web page generation ('cross-site scripting')
Assigner
References
Impacted products
Vendor Product Version
StormShield StormShield Network Security Affected: 4.3.0 , ≤ 4.3.41 (semver)
Affected: 4.8.0 , ≤ 4.8.15 (semver)
Affected: 5.0.0 , ≤ 5.0.5 (semver)
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-8474",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-01T13:05:31.957702Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-01T13:05:45.399Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "StormShield Network Security",
          "vendor": "StormShield",
          "versions": [
            {
              "lessThanOrEqual": "4.3.41",
              "status": "affected",
              "version": "4.3.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.8.15",
              "status": "affected",
              "version": "4.8.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.0.5",
              "status": "affected",
              "version": "5.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eA vulnerability was discovered on Stormshield Network Security\u0026nbsp;\u003c/p\u003e\u003cp\u003e\u003c/p\u003e\u003cul\u003e\u003cli\u003e4.3.0 to 4.3.41,\u0026nbsp;\u003c/li\u003e\u003cli\u003e4.8.0 to 4.8.15,\u0026nbsp;\u003c/li\u003e\u003cli\u003e5.0.0 to 5.0.5\u003c/li\u003e\u003c/ul\u003e\u003cp\u003e\u003c/p\u003e\u003cp\u003eIt is possible to execute a reflected XSS attack on the login API available on Stormshield SNS appliance by executing a script on the victim\u0027s machine. The risks include the theft of cookies or other sensitive data, as well as the modification of page behavior, for example, by redirecting the victim to malicious websites.\u003c/p\u003e"
            }
          ],
          "value": "A vulnerability was discovered on Stormshield Network Security\u00a0\n\n\n\n\n\n  *  4.3.0 to 4.3.41,\u00a0\n  *  4.8.0 to 4.8.15,\u00a0\n  *  5.0.0 to 5.0.5\n\n\n\n\n\n\n\n\nIt is possible to execute a reflected XSS attack on the login API available on Stormshield SNS appliance by executing a script on the victim\u0027s machine. The risks include the theft of cookies or other sensitive data, as well as the modification of page behavior, for example, by redirecting the victim to malicious websites."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79 Improper neutralization of input during web page generation (\u0027cross-site scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-01T07:50:04.199Z",
        "orgId": "24a3c815-5f22-4d74-967a-30958d6466f4",
        "shortName": "airbus"
      },
      "references": [
        {
          "url": "https://advisories.stormshield.eu/2026-003/"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eThe following updates fix this vulnerability:\u003c/p\u003e\u003cul\u003e\u003cli\u003eSNS 5.0.6\u003c/li\u003e\u003cli\u003eSNS 4.8.16\u003c/li\u003e\u003cli\u003eSNS 4.3.42\u003c/li\u003e\u003c/ul\u003e"
            }
          ],
          "value": "The following updates fix this vulnerability:\n\n  *  SNS 5.0.6\n  *  SNS 4.8.16\n  *  SNS 4.3.42"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Possible to run a Cross Site Scripting request on the login API available on Stormshield SNS appliances.",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "24a3c815-5f22-4d74-967a-30958d6466f4",
    "assignerShortName": "airbus",
    "cveId": "CVE-2026-8474",
    "datePublished": "2026-06-01T07:47:54.875Z",
    "dateReserved": "2026-05-13T13:10:26.492Z",
    "dateUpdated": "2026-06-01T13:05:45.399Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-8474",
      "date": "2026-07-25",
      "epss": "0.00183",
      "percentile": "0.08075"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-8474\",\"sourceIdentifier\":\"cert@airbus.com\",\"published\":\"2026-06-01T09:16:21.163\",\"lastModified\":\"2026-07-22T07:10:00.107\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability was discovered on Stormshield Network Security\u00a0\\n\\n\\n\\n\\n\\n  *  4.3.0 to 4.3.41,\u00a0\\n  *  4.8.0 to 4.8.15,\u00a0\\n  *  5.0.0 to 5.0.5\\n\\n\\n\\n\\n\\n\\n\\n\\nIt is possible to execute a reflected XSS attack on the login API available on Stormshield SNS appliance by executing a script on the victim\u0027s machine. The risks include the theft of cookies or other sensitive data, as well as the modification of page behavior, for example, by redirecting the victim to malicious websites.\"},{\"lang\":\"es\",\"value\":\"Una vulnerabilidad fue descubierta en Stormshield Network Security\\n\\n  *  4.3.0 a 4.3.41,\\n  *  4.8.0 a 4.8.15,\\n  *  5.0.0 a 5.0.5\\n\\nEs posible ejecutar un ataque XSS reflejado en la API de inicio de sesi\u00f3n disponible en el dispositivo Stormshield SNS mediante la ejecuci\u00f3n de un script en la m\u00e1quina de la v\u00edctima. Los riesgos incluyen el robo de cookies u otros datos sensibles, as\u00ed como la modificaci\u00f3n del comportamiento de la p\u00e1gina, por ejemplo, al redirigir a la v\u00edctima a sitios web maliciosos.\"}],\"affected\":[{\"source\":\"cert@airbus.com\",\"affectedData\":[{\"vendor\":\"StormShield\",\"product\":\"StormShield Network Security\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"4.3.0\",\"lessThanOrEqual\":\"4.3.41\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"4.8.0\",\"lessThanOrEqual\":\"4.8.15\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"5.0.0\",\"lessThanOrEqual\":\"5.0.5\",\"versionType\":\"semver\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"cert@airbus.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N\",\"baseScore\":5.3,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":1.4}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-06-01T13:05:31.957702Z\",\"id\":\"CVE-2026-8474\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"cert@airbus.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-79\"}]}],\"references\":[{\"url\":\"https://advisories.stormshield.eu/2026-003/\",\"source\":\"cert@airbus.com\"}]}}",
    "redhat_vex": {
      "current_release_date": "2026-06-05T19:24:26+00:00",
      "cve": "CVE-2026-8474",
      "id": "CVE-2026-8474",
      "initial_release_date": "2026-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "Possible to run a Cross Site Scripting request on the login API available on Stormshield SNS appliances.",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-8474.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-8474\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-06-01T13:05:31.957702Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-06-01T13:05:37.453Z\"}}], \"cna\": {\"title\": \"Possible to run a Cross Site Scripting request on the login API available on Stormshield SNS appliances.\", \"source\": {\"discovery\": \"UNKNOWN\"}, \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 5.3, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N\", \"integrityImpact\": \"LOW\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"StormShield\", \"product\": \"StormShield Network Security\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.3.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.3.41\"}, {\"status\": \"affected\", \"version\": \"4.8.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.8.15\"}, {\"status\": \"affected\", \"version\": \"5.0.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.0.5\"}], \"defaultStatus\": \"unaffected\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"The following updates fix this vulnerability:\\n\\n  *  SNS 5.0.6\\n  *  SNS 4.8.16\\n  *  SNS 4.3.42\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eThe following updates fix this vulnerability:\u003c/p\u003e\u003cul\u003e\u003cli\u003eSNS 5.0.6\u003c/li\u003e\u003cli\u003eSNS 4.8.16\u003c/li\u003e\u003cli\u003eSNS 4.3.42\u003c/li\u003e\u003c/ul\u003e\", \"base64\": false}]}], \"references\": [{\"url\": \"https://advisories.stormshield.eu/2026-003/\"}], \"x_generator\": {\"engine\": \"Vulnogram 1.0.2\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A vulnerability was discovered on Stormshield Network Security\\u00a0\\n\\n\\n\\n\\n\\n  *  4.3.0 to 4.3.41,\\u00a0\\n  *  4.8.0 to 4.8.15,\\u00a0\\n  *  5.0.0 to 5.0.5\\n\\n\\n\\n\\n\\n\\n\\n\\nIt is possible to execute a reflected XSS attack on the login API available on Stormshield SNS appliance by executing a script on the victim\u0027s machine. The risks include the theft of cookies or other sensitive data, as well as the modification of page behavior, for example, by redirecting the victim to malicious websites.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eA vulnerability was discovered on Stormshield Network Security\u0026nbsp;\u003c/p\u003e\u003cp\u003e\u003c/p\u003e\u003cul\u003e\u003cli\u003e4.3.0 to 4.3.41,\u0026nbsp;\u003c/li\u003e\u003cli\u003e4.8.0 to 4.8.15,\u0026nbsp;\u003c/li\u003e\u003cli\u003e5.0.0 to 5.0.5\u003c/li\u003e\u003c/ul\u003e\u003cp\u003e\u003c/p\u003e\u003cp\u003eIt is possible to execute a reflected XSS attack on the login API available on Stormshield SNS appliance by executing a script on the victim\u0027s machine. The risks include the theft of cookies or other sensitive data, as well as the modification of page behavior, for example, by redirecting the victim to malicious websites.\u003c/p\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-79\", \"description\": \"CWE-79 Improper neutralization of input during web page generation (\u0027cross-site scripting\u0027)\"}]}], \"providerMetadata\": {\"orgId\": \"24a3c815-5f22-4d74-967a-30958d6466f4\", \"shortName\": \"airbus\", \"dateUpdated\": \"2026-06-01T07:50:04.199Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-8474\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-06-01T13:05:45.399Z\", \"dateReserved\": \"2026-05-13T13:10:26.492Z\", \"assignerOrgId\": \"24a3c815-5f22-4d74-967a-30958d6466f4\", \"datePublished\": \"2026-06-01T07:47:54.875Z\", \"assignerShortName\": \"airbus\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.