CVE-2026-113465
CVE-2026-113465 · Possible DOM XSS in SNS Web Administration Portal
This page contains facts from public vulnerability sources. Check the original advisory before updating.
It is possible to execute a DOM-based Cross-Site Scripting attack against Stormshield’s web administration panel. To exploit this vulnerability, an attacker would need to craft a URL containing a malicious script payload within a specific parameter and lure an authenticated administrator into visiting that link.
CVSS 6.6 · Medium · EPSS 0.2% · Fix available
- Published
- Updated
Affected products and versions
stormshield network security
- Versions
- ≥ 5.0.0, ≤ 5.0.9: Affected (semver)
- ≥ 5.1.0, ≤ 5.1.3: Affected (semver)
- 5.0.10: Not affected (semver)
- 5.1.4 EA: Not affected (semver)
Update to 5.0.10; Update to 5.1.4 EA