cyfenced.com →

[ CVE-2026-111090 · Published 20 Oct 2026 ]

Vulnerability in Stormshield Network Security

CVSS 7.8 EPSS <1%1 agency advisoryFix available

[ Description ]Official description

A logic error exists in the signature verification routine resulting in acceptance of unauthenticated update and license files.It is necessary to use only the MyStormshield servers to retrieve update files or licenses, or to use automatic verification via SNS.

[ Fixes ]Fixes and patches

[ Advisories ]Government CERT advisories

  • CERT-FRCERTFR-2026-AVI-1339

    Multiple vulnerabilities in Stormshield Network Security Translated from French

    Multiple vulnerabilities have been discovered in Stormshield Network Security. Some of them allow an attacker to cause a breach of data integrity, remote cross-site scripting (XSS) and a security policy bypass.

    CVE-2026-111090

[ References ]References