CVE-2026-111090highCWE-287

CVE-2026-111090: falha de alta gravidade em Stormshield Network Security

Improper Signature Verification of Firmware Update Files

Publicada em

Seguir esta CVE+ Monitorar Stormshield Network Security

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.8epss 0.2%
A logic error exists in the signature verification routine resulting in acceptance of unauthenticated update and license files.It is necessary to use only the MyStormshield servers to retrieve update files or licenses, or to use automatic verification via SNS.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Produtos afetados
Stormshield · Stormshield Network Security
CVEs relacionadas — Stormshield Network Security

No mesmo produto, das mais perigosas para as menos.

CVE-2026-14466MEDIUMPossible XSS in the SNS web administration panelEPSS 0.2%CVE-2026-8482MEDIUMInformation leak in NSRPC client historyEPSS 0.2%CVE-2026-113465MEDIUMPossible DOM XSS in SNS Web Administration PortalEPSS 0.2%CVE-2026-111088MEDIUMStored XSS in the VPN logs monitorEPSS 0.2%CVE-2026-113808HIGHStored XSS on SNS Enrollment PortalEPSS 0.2%CVE-2026-113469HIGHImproper Signature Verification of Active Update FilesEPSS 0.2%