Stored Cross-Site Scripting in SNS Enrollment Portal by Stormshield
CVE-2026-113808

7.1HIGH

Key Information:

Vendor

Stormshield

Status
Stormshield Network Security
Vendor
CVE Published:
20 October 2026

What is CVE-2026-113808?

A stored Cross-Site Scripting (XSS) vulnerability has been discovered in the SNS Enrollment Portal, allowing attackers to inject malicious scripts during user creation requests. This stored payload is executed when an administrator validates the request, potentially leading to unauthorized access or data manipulation. Proper sanitization and validation should be implemented to mitigate this risk and ensure the security of the portal.

Affected Version(s)

Stormshield Network Security 4.3.0 <= 4.3.44

Stormshield Network Security 4.8.0 <= 4.8.19

Stormshield Network Security 5.0.0 <= 5.0.9

References

https://advisories.stormshield.eu/2026-026/

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.