CVE-2026-113469
Stormshield Network Security: Improper Signature Verification of Active Update Files
Stormshield Stormshield Network Security
CVSS
7.5HighExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.15%Chance of exploitation activity in the next 30 days, higher than 4% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
What fixes it
No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.
Description
A failure has been identified in the SNS during dynamic data files signature check.
A logic error in the signature verification routine resulting in acceptance of unauthenticated dynamic data update during Autoupdate routine.
Text from CVE List
Affected versions 7
- Stormshield Network Securityaffected: 4.3.0 through 4.3.44CVE List
- Stormshield Network Securityaffected: 4.8.0 through 4.8.19CVE List
- Stormshield Network Securityaffected: 5.0.0 through 5.0.9CVE List
- Stormshield Network Securityaffected: 5.1.0 through 5.1.3CVE List
- Stormshield Network Securityunaffected: 4.8.20 LTSBCVE List
- Stormshield Network Securityunaffected: 5.0.10CVE List
- Stormshield Network Securityunaffected: 5.1.4 EACVE List