---
id: "CVE-2026-111090"
kind: "vulnerability"
aliases: ["CVE-2026-111090"]
title: "Stormshield firewall accepts unsigned update and license files"
severity: "high"
cvss: 7.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "Stormshield Network Security", "fixed": ["4.3.45 QS", "4.8.20 LTSB", "5.0.10", "5.1.4 EA"], "affected": "4.3.0-4.3.44, 4.8.0-4.8.19, 5.0.0-5.0.9, 5.1.0-5.1.3", "ecosystem": "vendor"}]
ecosystems: []
tags: ["appliance", "firewall", "infrastructure", "license", "self-hosted", "sns", "stormshield"]
not_affected_if: ["managed-hosting", "mystormshield-only-downloads", "patched-version", "sha256-verified"]
published_at: "2026-10-20T08:16:42+00:00"
first_seen_at: "2026-10-23T21:57:20+00:00"
updated_at: "2026-10-25T03:38:08+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-111090", "first_seen_at": "2026-10-23T21:57:20+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-10-25T03:38:08+00:00"}]
---

# Stormshield firewall accepts unsigned update and license files

A logic error in Stormshield SNS signature verification accepts unauthenticated firmware update and license files. An attacker must get an admin to install a tampered file. Vendor rates it medium (CVSS 7.8, local, user interaction required).

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Stormshield Network Security affected 4.3.0-4.3.44, 4.8.0-4.8.19, 5.0.0-5.0.9, 5.1.0-5.1.3 fixed 4.3.45 QS, 4.8.20 LTSB, 5.0.10, 5.1.4 EA

## How to check

Check the SNS firmware version (web admin dashboard or System > Maintenance). Exposed if running 5.1.0-5.1.3, 5.0.0-5.0.9, 4.8.0-4.8.19 or 4.3.0-4.3.44. Then check where your team gets update and license files: anything not from MyStormshield or SNS automatic verification is a risk.

## Fix

Upgrade to SNS 5.1.4 EA, 5.0.10, 4.8.20 LTSB or 4.3.45 QS. Until then, fetch update and license files only from MyStormshield servers (or automatic verification via SNS) and verify each file's SHA-256 against the reference hash in the MyStormshield portal.

## Timeline

- 2026-10-23T21:57:20+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-111090
- 2026-10-25T03:38:08+00:00 analyst — Read Stormshield STORM-2026-031 v2 (primary). Affected/fixed versions and workaround from vendor text. Vendor: medium, CVSS 7.8 local/user-interaction (admin installs a file). Temporal marks PoC maturity but no public PoC link found; no exploitation reported. Sibling CVE-2026-113469 (STORM-2026-032) is the autoupdate variant. Social not searched.

## Documents

- [advisory] Stormshield STORM-2026-031: Improper Signature Verification of Firmware Update Files https://advisories.stormshield.eu/2026-031/
- [mentions] NVD CVE-2026-111090 https://nvd.nist.gov/vuln/detail/CVE-2026-111090

## From the sources

A logic error exists in the signature verification routine resulting in acceptance of unauthenticated update and license files.It is necessary to use only the MyStormshield servers to retrieve update files or licenses, or to use automatic verification via SNS.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_