What’s Vulnerable › Products
Stormshield Network Security vulnerabilities
45 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 11 published in the last 12 months.
Check whether your Stormshield Network Security version is affected
Latest Stormshield Network Security vulnerabilities
- CVE-2026-113810 — Stored XSS on SNS Enrollment Portal (CVSS 7.0)
- CVE-2026-113808 — Stored XSS on SNS Enrollment Portal (CVSS 7.1)
- CVE-2026-111088 — Stored XSS in the VPN logs monitor (CVSS 6.5)
- CVE-2026-113469 — Improper Signature Verification of Active Update Files (CVSS 7.5)
- CVE-2026-113465 — Possible DOM XSS in SNS Web Administration Portal (CVSS 6.6)
- CVE-2026-111090 — Improper Signature Verification of Firmware Update Files (CVSS 7.8)
- CVE-2026-14466 — Possible XSS in the SNS web administration panel (CVSS 4.3)
- CVE-2026-8482 — Information leak in NSRPC client history (CVSS 4.3)
- CVE-2026-8480 — Connection possible to the Administration portal with a revoked certificate (CVSS 4.3)
- CVE-2026-8474 — Possible to run a Cross Site Scripting request on the login API available on Stormshield SNS appliances. (CVSS 5.3)
- CVE-2025-48707 — (CVSS 7.5)
- CVE-2024-37386 — (CVSS 4.2)
- CVE-2023-41165 — (CVSS 4.8)
- CVE-2023-34198 — (CVSS 7.3)
- CVE-2023-28616 — (CVSS 7.5)
- CVE-2023-47091 — (CVSS 7.5)
- CVE-2023-47093 — (CVSS 6.5)
- CVE-2023-41166 — (CVSS 5.3)
- CVE-2023-26095 — (CVSS 7.5)
- CVE-2020-11711 — (CVSS 4.8)
- CVE-2023-20052 — (CVSS 5.3)
- CVE-2023-20032 — (CVSS 9.8)
- CVE-2023-0286 — X.400 address type confusion in X.509 GeneralName (CVSS 7.4)
- CVE-2022-4450 — Double free after calling PEM_read_bio_ex (CVSS 7.5)
- CVE-2022-4304 — Timing Oracle in RSA Decryption (CVSS 5.9)