{"id":"CVE-2026-113465","kind":"vulnerability","aliases":["CVE-2026-113465"],"related":[],"title":"Stormshield web administration panel: DOM-based XSS via crafted URL","description":"It is possible to execute a DOM-based Cross-Site Scripting attack against Stormshield’s web administration panel.\n\n\n\nTo exploit this vulnerability, an attacker would need to craft a URL containing a malicious script payload within a specific parameter and lure an authenticated administrator into visiting that link.","summary":"The Stormshield web administration panel has a DOM-based cross-site scripting flaw. An attacker who lures a logged-in administrator to a crafted link can run script in that administrator's session.","severity":"medium","cvss":6.6,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["firewall","infrastructure","self-hosted","stormshield"],"not_affected_if":["no-web-admin-use"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-20T09:17:09+00:00","first_seen_at":"2026-10-23T21:57:20+00:00","triaged_at":"2026-10-25T03:46:57+00:00","updated_at":"2026-10-25T03:46:57+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-25T03:46:57Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"Stormshield web administration panel: DOM-based XSS via crafted URL","impact":"medium","summary":"The Stormshield web administration panel has a DOM-based cross-site scripting flaw. An attacker who lures a logged-in administrator to a crafted link can run script in that administrator's session.","category":"infrastructure","nicknames":[],"who_cares":["stormshield","firewall","self-hosted"],"confidence":0.5,"needs_auth":"yes","worst_case":"script runs in an administrator's browser session","analyst_note":"Find the vendor advisory from Stormshield to get affected and fixed versions and a fix; the NVD entry alone does not name them.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["no-web-admin-use"],"who_is_affected":"Teams that run Stormshield appliances and use the web administration panel. The sources do not name affected versions. Teams that do not expose or use the web admin panel have less reason to worry, but the sources do not say more.","user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000532,"input_tokens":3315,"output_tokens":401,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-113465':14A,17A '-2026':13A,16A 'administr':3A,27B,47B,57B,78C,105C 'attack':40B,73C,85C 'authent':104C 'base':7A,33B,68C 'contain':92C 'craft':10A,50B,89C 'cross':35B,70C 'cross-sit':34B,69C 'cve':12A,15A 'dom':6A,32B,67C 'dom-bas':5A,31B,66C 'execut':64C 'exploit':81C 'firewal':18B 'flaw':38B 'host':22B 'infrastructur':19B 'link':51B,109C 'log':45B 'logged-in':44B 'lure':42B,102C 'malici':94C 'need':87C 'panel':4A,28B,79C 'paramet':100C 'payload':96C 'possibl':62C 'run':53B 'script':37B,54B,72C,95C 'self':21B 'self-host':20B 'session':59B 'site':36B,71C 'specif':99C 'stormshield':1A,23B,25B,75C 'url':11A,91C 'via':9A 'visit':107C 'vulner':83C 'web':2A,26B,77C 'within':97C 'would':86C 'xss':8A","nicknames":[],"mitigations":[],"who_affected":"Teams that run Stormshield appliances and use the web administration panel. The sources do not name affected versions. Teams that do not expose or use the web admin panel have less reason to worry, but the sources do not say more.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T09:17:09+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N","cvss_by":"cert@airbus.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-113465","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113465","severity":null,"published_at":"2026-10-20T09:17:09+00:00","modified_at":"2026-10-20T19:35:23+00:00","first_seen_at":"2026-10-23T21:57:20+00:00","fetched_at":"2026-10-23T22:28:57+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}