CVE-2026-113810
CVE-2026-113810 · Stored XSS on SNS Enrollment Portal
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal. Through the captive portal an attacker can inject an XSS when requesting certificate creation for user. The stored XSS can only be triggered during validation by the administrator.
CVSS 7.0 · High · EPSS 0.1% · Fix available
- Published
- Updated
Affected products and versions
stormshield network security
- Versions
- ≥ 4.8.0, ≤ 4.8.19: Affected (semver)
- ≥ 5.0.0, ≤ 5.0.9: Affected (semver)
- ≥ 5.1.0, ≤ 5.1.3: Affected (semver)
- 4.8.20 LTSB: Not affected (semver)
- 5.0.10: Not affected (semver)
- 5.1.4 EA: Not affected
Update to 4.8.20 LTSB; Update to 5.0.10; Update to 5.1.4 EA