{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "stormshield_network_security: all CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/stormshield--stormshield-network-security/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/stormshield--stormshield-network-security/all.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-111088/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-111088/",
   "title": "CVE-2026-111088 · stormshield_network_security · disclosed",
   "content_text": "A Stored Cross-Site Scripting vulnerability exists in the SNS VPN log monitoring screen.",
   "date_published": "2026-10-20T18:45:33Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-113810/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-113810/",
   "title": "CVE-2026-113810 · stormshield_network_security · disclosed",
   "content_text": "A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal.\n\n\n\nThrough the captive portal an attacker can inject an XSS when requesting certificate creation for user. The stored XSS can only be triggered during validation by the administrator.",
   "date_published": "2026-10-20T18:31:35Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-113808/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-113808/",
   "title": "CVE-2026-113808 · stormshield_network_security · disclosed",
   "content_text": "A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal.\n\n\n\nThrough the captive portal an attacker can inject an XSS when requesting user creation. The stored XSS can only be triggered during validation by the administrator.",
   "date_published": "2026-10-20T18:15:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-113469/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-113469/",
   "title": "CVE-2026-113469 · stormshield_network_security · disclosed",
   "content_text": "A failure has been identified in the SNS during dynamic data files signature check.\n\n\n\nA logic error in the signature verification routine resulting in acceptance of unauthenticated dynamic data update during Autoupdate routine.",
   "date_published": "2026-10-20T08:29:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-113465/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-113465/",
   "title": "CVE-2026-113465 · stormshield_network_security · disclosed",
   "content_text": "It is possible to execute a DOM-based Cross-Site Scripting attack against Stormshield’s web administration panel.\n\n\n\nTo exploit this vulnerability, an attacker would need to craft a URL containing a malicious script payload within a specific parameter and lure an authenticated administrator into visiting that link.",
   "date_published": "2026-10-20T08:09:33Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-111090/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-111090/",
   "title": "CVE-2026-111090 · stormshield_network_security · disclosed",
   "content_text": "A logic error exists in the signature verification routine resulting in acceptance of unauthenticated update and license files.It is necessary to use only the MyStormshield servers to retrieve update files or licenses, or to use automatic verification via SNS.",
   "date_published": "2026-10-20T07:42:53Z"
  }
 ]
}