Live › vulnerability › CVE-2026-113469
Go to dashboardStormshield Network Security (SNS) firewalls accept unauthenticated dynamic data update files during Autoupdate because of a logic error in signature verification. An attacker positioned on the network path to the update server (adjacent, high complexity) could get unverified data installed.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Stormshield Network Security | vendor | 4.3.0-4.3.44, 4.8.0-4.8.19, 5.0.0-5.0.9, 5.1.0-5.1.3 | 4.3.45 QS, 4.8.20 LTSB, 5.0.10, 5.1.4 EA |
5.1.0-5.1.3, 5.0.0-5.0.9, 4.8.0-4.8.19 or 4.3.0-4.3.445.1.4 EA, 5.0.10, 4.8.20 LTSB or 4.3.45 QSEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
A failure has been identified in the SNS during dynamic data files signature check.
A logic error in the signature verification routine resulting in acceptance of unauthenticated dynamic data update during Autoupdate routine.
This page as .md · .json · in your agent: get_signal("CVE-2026-113469")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.