What’s Vulnerable › Vulnerabilities
CVE-2026-14466: Possible XSS in the SNS web administration panel
- Severity: medium (CVSS 4.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-09-04 · updated 2026-09-08
- Weakness: CWE-79
Description
It’s possible to run a stored XSS in Stormshield’s web administration panel. To exploit this vulnerability, a SNS administrator with appropriate permissions must inject some malicious script in a group’s comments in the webservices administration interface.
Affected products
- Stormshield Network Security: from 4.8.0 through 4.8.16; from 5.0.0 through 5.0.6
References
Get alerted when CVE-2026-14466 or the next vulnerability affects your stack