CVE-2026-14466

No fix known EPSS <1%CVSS 4.3

It’s possible to run a stored XSS in Stormshield’s web administration panel. To exploit this vulnerability, a SNS administrator with appropriate permissions must inject  some malicious script in a group’s comments in the webservices administration interface.

Published 2026-09-04 · CVE record · OSV

Products: stormshield_network_security