CVE-2026-8474
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
Stormshield Network Security versions 4.3.0-4.3.41, 4.8.0-4.8.15, and 5.0.0-5.0.5 have a Reflected XSS vulnerability in the login API. An attacker can execute a script on the victim's machine, potentially leading to cookie theft or redirection to malicious sites.
Risk Assessment
Session theft or user redirection can lead to confidentiality and integrity breaches.
Recommendation
Update Stormshield SNS to the latest version and consider adding CSP headers for the login API.
Other vulnerabilities in Stormshield Network Security
See all- CVE-2026-8482Medium
A vulnerability was discovered in StormShield Network Security versions 4.3.0 to 4.3.41, 4.8.0 to 4.8.15, and 5.0.0 to 5.0.5, allowing a possible leak of secret information when administration commands are passed via the CLI tool. An attacker with SSH access to the firewall (if SSH multiuser mode is enabled) could potentially obtain the proxy CA passphrase or TPM password.
- CVE-2026-8480Medium
A vulnerability in Stormshield Network Security allows authentication using a revoked client certificate on the captive-admin portal. An attacker possessing such a certificate can gain administrative access.
Original NVD description (English source)
A vulnerability was discovered on Stormshield Network Security * 4.3.0 to 4.3.41, * 4.8.0 to 4.8.15, * 5.0.0 to 5.0.5 It is possible to execute a reflected XSS attack on the login API available on Stormshield SNS appliance by executing a script on the victim's machine. The risks include the theft of cookies or other sensitive data, as well as the modification of page behavior, for example, by redirecting the victim to malicious websites.