What’s Vulnerable › Vulnerabilities
CVE-2026-8482: Information leak in NSRPC client history
- Severity: medium (CVSS 4.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-07-02 · updated 2026-10-25
- Weakness: CWE-532
Description
A vulnerability was discovered on StormShield Network Security 4.3.0 to 4.3.41 (included), 4.8.0 to 4.8.15 (included) , 5.0.0 to 5.0.5 (included) There is a possible leak of secret information if administration commands have been passed with the CLI command line tool. Someone with SSH access to the firewall (if SSH multiuser mode is enabled) could possibly get the proxy CA passphrase or TPM password.
Affected products
- Stormshield Network Security: from 4.3.0 through 4.3.41; from 4.8.0 through 4.8.15; from 5.0.0 through 5.0.5
References
Get alerted when CVE-2026-8482 or the next vulnerability affects your stack