Live › vulnerability › CVE-2026-113465
Go to dashboardThe Stormshield web administration panel has a DOM-based cross-site scripting flaw. An attacker who lures a logged-in administrator to a crafted link can run script in that administrator's session.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams that run Stormshield appliances and use the web administration panel. The sources do not name affected versions. Teams that do not expose or use the web admin panel have less reason to worry, but the sources do not say more.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
It is possible to execute a DOM-based Cross-Site Scripting attack against Stormshield’s web administration panel.
To exploit this vulnerability, an attacker would need to craft a URL containing a malicious script payload within a specific parameter and lure an authenticated administrator into visiting that link.
This page as .md · .json · in your agent: get_signal("CVE-2026-113465")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.