[ Vendor · 6 CVEs ]
Stormshield
CVEs affecting Stormshield published in the last 30 days, plus any Stormshield CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-113808 | 20 Oct 2026 | CVSS 7.1 | Stormshield Network SecurityA Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal. Through the captive portal an attacker can inject an XSS when… | |
| CVE-2026-113810 | 20 Oct 2026 | CVSS 7.0 | Stormshield Network SecurityA Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal. Through the captive portal an attacker can inject an XSS when… | |
| CVE-2026-111088 | 20 Oct 2026 | CVSS 6.5 | Stormshield Network SecurityA Stored Cross-Site Scripting vulnerability exists in the SNS VPN log monitoring screen. | |
| CVE-2026-113465 | 20 Oct 2026 | CVSS 6.6 | Stormshield Network SecurityIt is possible to execute a DOM-based Cross-Site Scripting attack against Stormshield’s web administration panel. To exploit this vulnerability, an… | |
| CVE-2026-113469 | 20 Oct 2026 | CVSS 7.5 | Stormshield Network SecurityA failure has been identified in the SNS during dynamic data files signature check. A logic error in the signature verification routine resulting in… | |
| CVE-2026-111090 | 20 Oct 2026 | CVSS 7.8 | Stormshield Network SecurityA logic error exists in the signature verification routine resulting in acceptance of unauthenticated update and license files.It is necessary to use… | Fix |