CVE-2026-14466mediumCWE-79

CVE-2026-14466: falha de média gravidade em Stormshield Network Security

Possible XSS in the SNS web administration panel

Publicada em

Seguir esta CVE+ Monitorar Stormshield Network Security

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.3epss 0.2%
It’s possible to run a stored XSS in Stormshield’s web administration panel. To exploit this vulnerability, a SNS administrator with appropriate permissions must inject  some malicious script in a group’s comments in the webservices administration interface.
CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N
Produtos afetados
Stormshield · Stormshield Network Security
CVEs relacionadas — Stormshield Network Security

No mesmo produto, das mais perigosas para as menos.

CVE-2026-8482MEDIUMInformation leak in NSRPC client historyEPSS 0.2%CVE-2026-113465MEDIUMPossible DOM XSS in SNS Web Administration PortalEPSS 0.2%CVE-2026-111088MEDIUMStored XSS in the VPN logs monitorEPSS 0.2%CVE-2026-113808HIGHStored XSS on SNS Enrollment PortalEPSS 0.2%CVE-2026-113469HIGHImproper Signature Verification of Active Update FilesEPSS 0.2%CVE-2026-111090HIGHImproper Signature Verification of Firmware Update FilesEPSS 0.2%