CVE-2026-8482
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk12th percentile - higher than 12% of all known CVEs
Summary
A vulnerability was discovered in StormShield Network Security versions 4.3.0 to 4.3.41, 4.8.0 to 4.8.15, and 5.0.0 to 5.0.5, allowing a possible leak of secret information when administration commands are passed via the CLI tool. An attacker with SSH access to the firewall (if SSH multiuser mode is enabled) could potentially obtain the proxy CA passphrase or TPM password.
Risk Assessment
The risk involves unauthorized access to sensitive credentials, potentially compromising the confidentiality and integrity of protected network resources.
Recommendation
It is recommended to immediately update StormShield Network Security to the latest available version and disable SSH multiuser mode if not required.
Other vulnerabilities in StormShield Network Security
See all- CVE-2026-8480Medium
A vulnerability in Stormshield Network Security allows authentication using a revoked client certificate on the captive-admin portal. An attacker possessing such a certificate can gain administrative access.
- CVE-2026-8474Medium
Stormshield Network Security versions 4.3.0-4.3.41, 4.8.0-4.8.15, and 5.0.0-5.0.5 have a Reflected XSS vulnerability in the login API. An attacker can execute a script on the victim's machine, potentially leading to cookie theft or redirection to malicious sites.
Original NVD description (English source)
A vulnerability was discovered on StormShield Network Security 4.3.0 to 4.3.41 (included), 4.8.0 to 4.8.15 (included) , 5.0.0 to 5.0.5 (included) There is a possible leak of secret information if administration commands have been passed with the CLI command line tool. Someone with SSH access to the firewall (if SSH multiuser mode is enabled) could possibly get the proxy CA passphrase or TPM password.