CVE-2026-8482mediumCWE-532

CVE-2026-8482: falha de média gravidade em Stormshield Network Security

Information leak in NSRPC client history

Publicada em

Seguir esta CVE+ Monitorar Stormshield Network Security

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.3epss 0.2%
A vulnerability was discovered on StormShield Network Security 4.3.0 to 4.3.41 (included), 4.8.0 to 4.8.15 (included) , 5.0.0 to 5.0.5 (included) There is a possible leak of secret information if administration commands have been passed with the CLI command line tool. Someone with SSH access to the firewall (if SSH multiuser mode is enabled) could possibly get the proxy CA passphrase or TPM password.
CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N
Produtos afetados
Stormshield · Stormshield Network Security
CVEs relacionadas — Stormshield Network Security

No mesmo produto, das mais perigosas para as menos.

CVE-2026-14466MEDIUMPossible XSS in the SNS web administration panelEPSS 0.2%CVE-2026-113465MEDIUMPossible DOM XSS in SNS Web Administration PortalEPSS 0.2%CVE-2026-111088MEDIUMStored XSS in the VPN logs monitorEPSS 0.2%CVE-2026-113808HIGHStored XSS on SNS Enrollment PortalEPSS 0.2%CVE-2026-113469HIGHImproper Signature Verification of Active Update FilesEPSS 0.2%CVE-2026-111090HIGHImproper Signature Verification of Firmware Update FilesEPSS 0.2%