CVE-2026-113465

No fix known EPSS <1%CVSS 6.6

It is possible to execute a DOM-based Cross-Site Scripting attack against Stormshield’s web administration panel. To exploit this vulnerability, an attacker would need to craft a URL containing a malicious script payload within a specific parameter and lure an authenticated administrator into visiting that link.

Published 2026-10-20 · CVE record · OSV

Products: stormshield_network_security