CVE-2026-113465mediumCWE-79

CVE-2026-113465: falha de média gravidade em Stormshield Network Security

Possible DOM XSS in SNS Web Administration Portal

Publicada em

Seguir esta CVE+ Monitorar Stormshield Network Security

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.6epss 0.2%
It is possible to execute a DOM-based Cross-Site Scripting attack against Stormshield’s web administration panel. To exploit this vulnerability, an attacker would need to craft a URL containing a malicious script payload within a specific parameter and lure an authenticated administrator into visiting that link.
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Produtos afetados
Stormshield · Stormshield Network Security
CVEs relacionadas — Stormshield Network Security

No mesmo produto, das mais perigosas para as menos.

CVE-2026-14466MEDIUMPossible XSS in the SNS web administration panelEPSS 0.2%CVE-2026-8482MEDIUMInformation leak in NSRPC client historyEPSS 0.2%CVE-2026-111088MEDIUMStored XSS in the VPN logs monitorEPSS 0.2%CVE-2026-113808HIGHStored XSS on SNS Enrollment PortalEPSS 0.2%CVE-2026-113469HIGHImproper Signature Verification of Active Update FilesEPSS 0.2%CVE-2026-111090HIGHImproper Signature Verification of Firmware Update FilesEPSS 0.2%