---
id: "CVE-2026-113469"
kind: "vulnerability"
aliases: ["CVE-2026-113469"]
title: "SNS: dynamic data signature check accepts unauthenticated updates during autoupdate"
severity: "high"
cvss: 7.5
epss: null
exploited: false
status: "resolved"
category: "infrastructure"
products: [{"name": "Stormshield Network Security", "fixed": ["4.3.45 QS", "4.8.20 LTSB", "5.0.10", "5.1.4 EA"], "affected": "4.3.0-4.3.44, 4.8.0-4.8.19, 5.0.0-5.0.9, 5.1.0-5.1.3", "ecosystem": "vendor"}]
ecosystems: []
tags: ["autoupdate", "firewall", "infrastructure", "network-appliance", "sns", "stormshield"]
not_affected_if: ["https-official-update-servers", "patched-version"]
published_at: "2026-10-20T09:17:09+00:00"
first_seen_at: "2026-10-23T21:57:20+00:00"
updated_at: "2026-10-25T03:37:02+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-113469", "first_seen_at": "2026-10-23T21:57:20+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-10-25T03:37:02+00:00"}]
---

# SNS: dynamic data signature check accepts unauthenticated updates during autoupdate

Stormshield Network Security (SNS) firewalls accept unauthenticated dynamic data update files during Autoupdate because of a logic error in signature verification. An attacker positioned on the network path to the update server (adjacent, high complexity) could get unverified data installed.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Stormshield Network Security affected 4.3.0-4.3.44, 4.8.0-4.8.19, 5.0.0-5.0.9, 5.1.0-5.1.3 fixed 4.3.45 QS, 4.8.20 LTSB, 5.0.10, 5.1.4 EA

## How to check

On the firewall, check the SNS firmware version (web admin dashboard or System > Maintenance). Exposed if running 5.1.0-5.1.3, 5.0.0-5.0.9, 4.8.0-4.8.19 or 4.3.0-4.3.44. Also check whether Autoupdate uses custom update servers or plain HTTP.

## Fix

Upgrade to SNS 5.1.4 EA, 5.0.10, 4.8.20 LTSB or 4.3.45 QS. Until then use only official Stormshield update servers or SMC mirrors with HTTPS enabled; for custom update servers, enable HTTPS and verify SHA-256 hashes of hosted files against the official servers.

## Timeline

- 2026-10-23T21:57:20+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-113469
- 2026-10-25T03:37:02+00:00 analyst — SNS = Stormshield Network Security (firewall). Stormshield STORM-2026-032 v2 read: affected/fixed versions, workaround. Vendor rates medium, CNA CVSS 7.5 (adjacent, high complexity); temporal marks PoC maturity but no public PoC link found; no exploitation reported. Not searched social.

## Documents

- [advisory] Stormshield STORM-2026-032: Improper Signature Verification of Active Update Files https://advisories.stormshield.eu/2026-032/
- [mentions] NVD CVE-2026-113469 https://nvd.nist.gov/vuln/detail/CVE-2026-113469

## From the sources

A failure has been identified in the SNS during dynamic data files signature check.



A logic error in the signature verification routine resulting in acceptance of unauthenticated dynamic data update during Autoupdate routine.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_