CVE-2026-113808highCWE-79

CVE-2026-113808: fallo de gravedad alta en Stormshield Network Security

Stored XSS on SNS Enrollment Portal

Publicada el

Seguir esta CVE+ Monitorear Stormshield Network Security

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 7.1epss 0.2%
A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal. Through the captive portal an attacker can inject an XSS when requesting user creation. The stored XSS can only be triggered during validation by the administrator.
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Productos afectados
Stormshield · Stormshield Network Security
CVEs relacionadas — Stormshield Network Security

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-14466MEDIUMPossible XSS in the SNS web administration panelEPSS 0.2%CVE-2026-8482MEDIUMInformation leak in NSRPC client historyEPSS 0.2%CVE-2026-113465MEDIUMPossible DOM XSS in SNS Web Administration PortalEPSS 0.2%CVE-2026-111088MEDIUMStored XSS in the VPN logs monitorEPSS 0.2%CVE-2026-113469HIGHImproper Signature Verification of Active Update FilesEPSS 0.2%CVE-2026-111090HIGHImproper Signature Verification of Firmware Update FilesEPSS 0.2%