p PatchFirst

CVE-2026-111090

CVE-2026-111090 · Improper Signature Verification of Firmware Update Files

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A logic error exists in the signature verification routine resulting in acceptance of unauthenticated update and license files.It is necessary to use only the MyStormshield servers to retrieve update files or licenses, or to use automatic verification via SNS.

CVSS 7.8 · High · EPSS 0.2% · Fix available

Published
Updated

Affected products and versions

  • stormshield network security

    Versions
    • ≥ 4.3.0, ≤ 4.3.44: Affected (semver)
    • ≥ 4.8.0, ≤ 4.8.19: Affected (semver)
    • ≥ 5.0.0, ≤ 5.0.9: Affected (semver)
    • ≥ 5.1.0, ≤ 5.1.3: Affected (semver)
    • 4.8.20 LTSB: Not affected (semver)
    • 5.0.10: Not affected (semver)
    • 5.1.4 EA: Not affected (semver)
    • 4.3.45 QS: Not affected (semver)

    Update to 4.3.45 QS; Update to 4.8.20 LTSB; Update to 5.0.10; Update to 5.1.4 EA

Original sources

Check your server →