CVE-2026-113808 - Vulnerability Details - OpenCVE

A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal. Through the captive portal an attacker can inject an XSS when requesting user creation. The stored XSS can only be triggered during validation by the administrator.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Stormshield	Stormshield Network Security

No data.

No data.

References

Link	Providers
https://advisories.stormshield.eu/2026-026/

History

Tue, 20 Oct 2026 20:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Tue, 20 Oct 2026 20:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Stormshield Stormshield stormshield Network Security
Vendors & Products		Stormshield Stormshield stormshield Network Security

Tue, 20 Oct 2026 18:30:00 +0000

Type	Values Removed	Values Added
Description		A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal. Through the captive portal an attacker can inject an XSS when requesting user creation. The stored XSS can only be triggered during validation by the administrator.
Title		Stored XSS on SNS Enrollment Portal
Weaknesses		CWE-79
References		https://advisories.stormshield.eu/2026-026/
Metrics		cvssV3_1 `{'score': 7.1, 'vector': 'CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: airbus

Published: 2026-10-20T18:15:43.059Z

Updated: 2026-10-20T18:47:45.044Z

Reserved: 2026-10-20T18:08:04.738Z

Link: CVE-2026-113808

Vulnrichment

Updated: 2026-10-20T18:47:39.687Z

NVD

Status : Deferred

Published: 2026-10-20T19:17:34.193

Modified: 2026-10-20T19:35:23.397

Link: CVE-2026-113808

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-113808", "assignerOrgId": "24a3c815-5f22-4d74-967a-30958d6466f4", "state": "PUBLISHED", "assignerShortName": "airbus", "dateReserved": "2026-10-20T18:08:04.738Z", "datePublished": "2026-10-20T18:15:43.059Z", "dateUpdated": "2026-10-20T18:47:45.044Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "24a3c815-5f22-4d74-967a-30958d6466f4", "shortName": "airbus", "dateUpdated": "2026-10-20T18:15:43.059Z"}, "title": "Stored XSS on SNS Enrollment Portal", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-79", "description": "CWE-79 Improper neutralization of input during web page generation ('cross-site scripting')", "type": "CWE"}]}], "affected": [{"vendor": "Stormshield", "product": "Stormshield Network Security", "versions": [{"status": "affected", "version": "4.3.0", "lessThanOrEqual": "4.3.44", "versionType": "semver"}, {"status": "affected", "version": "4.8.0", "lessThanOrEqual": "4.8.19", "versionType": "semver"}, {"status": "affected", "version": "5.0.0", "lessThanOrEqual": "5.0.9", "versionType": "semver"}, {"status": "affected", "version": "5.1.0", "lessThanOrEqual": "5.1.3", "versionType": "semver"}, {"status": "unaffected", "version": "4.3.45 QS", "versionType": "semver"}, {"status": "unaffected", "version": "4.8.20 LTSB", "versionType": "semver"}, {"status": "unaffected", "version": "5.0.10", "versionType": "semver"}, {"status": "unaffected", "version": "5.1.4 EA"}], "defaultStatus": "unknown"}], "descriptions": [{"lang": "en", "value": "A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal.\n\n\n\nThrough the captive portal an attacker can inject an XSS when requesting user creation. The stored XSS can only be triggered during validation by the administrator.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal.</p><p>Through the captive portal an attacker can inject an XSS when requesting user creation. The stored XSS can only be triggered during validation by the administrator.</p>"}]}], "references": [{"url": "https://advisories.stormshield.eu/2026-026/"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "ADJACENT_NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 7.1, "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"}}], "workarounds": [{"lang": "en", "value": "There is no workaround solution.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "There is no workaround solution."}]}], "solutions": [{"lang": "en", "value": "The following updates will fix this vulnerability:\n\n\n\n\n\n * SNS 5.1.4 EA\n * SNS 5.0.10\n * SNS 4.8.20 LSTB\n * SNS 4.3.45 QS", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>The following updates will fix this vulnerability:</p><p></p><ul><li>SNS 5.1.4 EA</li><li>SNS 5.0.10</li><li>SNS 4.8.20 LSTB</li><li>SNS 4.3.45 QS</li></ul><p></p><br>"}]}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.5"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-10-20T18:47:32.207003Z", "id": "CVE-2026-113808", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-20T18:47:45.044Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-113808", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-20T18:47:32.207003Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-20T18:47:39.687Z"}}], "cna": {"title": "Stored XSS on SNS Enrollment Portal", "source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.1, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Stormshield", "product": "Stormshield Network Security", "versions": [{"status": "affected", "version": "4.3.0", "versionType": "semver", "lessThanOrEqual": "4.3.44"}, {"status": "affected", "version": "4.8.0", "versionType": "semver", "lessThanOrEqual": "4.8.19"}, {"status": "affected", "version": "5.0.0", "versionType": "semver", "lessThanOrEqual": "5.0.9"}, {"status": "affected", "version": "5.1.0", "versionType": "semver", "lessThanOrEqual": "5.1.3"}, {"status": "unaffected", "version": "4.3.45 QS", "versionType": "semver"}, {"status": "unaffected", "version": "4.8.20 LTSB", "versionType": "semver"}, {"status": "unaffected", "version": "5.0.10", "versionType": "semver"}, {"status": "unaffected", "version": "5.1.4 EA"}], "defaultStatus": "unknown"}], "solutions": [{"lang": "en", "value": "The following updates will fix this vulnerability:\n\n\n\n\n\n * SNS 5.1.4 EA\n * SNS 5.0.10\n * SNS 4.8.20 LSTB\n * SNS 4.3.45 QS", "supportingMedia": [{"type": "text/html", "value": "<p>The following updates will fix this vulnerability:</p><p></p><ul><li>SNS 5.1.4 EA</li><li>SNS 5.0.10</li><li>SNS 4.8.20 LSTB</li><li>SNS 4.3.45 QS</li></ul><p></p><br>", "base64": false}]}], "references": [{"url": "https://advisories.stormshield.eu/2026-026/"}], "workarounds": [{"lang": "en", "value": "There is no workaround solution.", "supportingMedia": [{"type": "text/html", "value": "There is no workaround solution.", "base64": false}]}], "x_generator": {"engine": "Vulnogram 1.0.5"}, "descriptions": [{"lang": "en", "value": "A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal.\n\n\n\nThrough the captive portal an attacker can inject an XSS when requesting user creation. The stored XSS can only be triggered during validation by the administrator.", "supportingMedia": [{"type": "text/html", "value": "<p>A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal.</p><p>Through the captive portal an attacker can inject an XSS when requesting user creation. The stored XSS can only be triggered during validation by the administrator.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-79", "description": "CWE-79 Improper neutralization of input during web page generation ('cross-site scripting')"}]}], "providerMetadata": {"orgId": "24a3c815-5f22-4d74-967a-30958d6466f4", "shortName": "airbus", "dateUpdated": "2026-10-20T18:15:43.059Z"}}}, "cveMetadata": {"cveId": "CVE-2026-113808", "state": "PUBLISHED", "dateUpdated": "2026-10-20T18:47:45.044Z", "dateReserved": "2026-10-20T18:08:04.738Z", "assignerOrgId": "24a3c815-5f22-4d74-967a-30958d6466f4", "datePublished": "2026-10-20T18:15:43.059Z", "assignerShortName": "airbus"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unknown", "product": "Stormshield Network Security", "vendor": "Stormshield", "versions": [{"lessThanOrEqual": "4.3.44", "status": "affected", "version": "4.3.0", "versionType": "semver"}, {"lessThanOrEqual": "4.8.19", "status": "affected", "version": "4.8.0", "versionType": "semver"}, {"lessThanOrEqual": "5.0.9", "status": "affected", "version": "5.0.0", "versionType": "semver"}, {"lessThanOrEqual": "5.1.3", "status": "affected", "version": "5.1.0", "versionType": "semver"}, {"status": "unaffected", "version": "4.3.45 QS", "versionType": "semver"}, {"status": "unaffected", "version": "4.8.20 LTSB", "versionType": "semver"}, {"status": "unaffected", "version": "5.0.10", "versionType": "semver"}, {"status": "unaffected", "version": "5.1.4 EA"}]}], "source": "cert@airbus.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal.\n\n\n\nThrough the captive portal an attacker can inject an XSS when requesting user creation. The stored XSS can only be triggered during validation by the administrator."}], "id": "CVE-2026-113808", "lastModified": "2026-10-20T19:35:23.397", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 5.9, "source": "cert@airbus.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-113808", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-10-20T18:47:32.207003Z", "version": "2.0.3"}}]}, "published": "2026-10-20T19:17:34.193", "references": [{"source": "cert@airbus.com", "url": "https://advisories.stormshield.eu/2026-026/"}], "sourceIdentifier": "cert@airbus.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "cert@airbus.com", "type": "Secondary"}]}