Stored Cross-Site Scripting in SNS VPN Log Monitoring by Stormshield
CVE-2026-111088

6.5MEDIUM

Key Information:

Vendor

Stormshield

Status
Stormshield Network Security
Vendor
CVE Published:
20 October 2026

What is CVE-2026-111088?

A Stored Cross-Site Scripting (XSS) vulnerability has been identified in the SNS VPN log monitoring screen provided by Stormshield. This security flaw can allow an attacker to inject malicious scripts that may execute whenever an authorized user accesses the compromised logs. Exploiting this vulnerability could lead to unauthorized access to sensitive data, session hijacking, or further exploitation of users’ credentials. It is crucial for users to review their configurations and apply necessary patches to protect their systems.

Affected Version(s)

Stormshield Network Security 4.3.0 <= 4.3.44

Stormshield Network Security 4.8.0 <= 4.8.19

Stormshield Network Security 5.0.0 <= 5.0.9

References

https://advisories.stormshield.eu/2026-030/

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.