Live › vulnerability › CVE-2026-113810
Go to dashboardStormshield Network Security's enrollment portal does not sanitize input in captive-portal certificate requests. The stored script runs in the browser of the administrator who validates the request, so an attacker can act with admin rights. Vendor rates it medium, CVSS 7.0 (CNA).
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Stormshield Network Security | vendor | >= 4.8.0, <= 4.8.19; >= 5.0.0, <= 5.0.9; >= 5.1.0, <= 5.1.3 | 4.8.20 LTSB, 5.0.10, 5.1.4 EA |
4.8.0-4.8.19, 5.0.0-5.0.9 or 5.1.0-5.1.3 and the captive portal/enrollment feature is in use4.8.20 LTSB, 5.0.10 or 5.1.4 EAEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal.
Through the captive portal an attacker can inject an XSS when requesting certificate creation for user. The stored XSS can only be triggered during validation by the administrator.
This page as .md · .json · in your agent: get_signal("CVE-2026-113810")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.