{"id":"CVE-2026-113465","title":"Possible DOM XSS in SNS Web Administration Portal","summary":"It is possible to execute a DOM-based Cross-Site Scripting attack against Stormshield’s web administration panel.\n\n\n\nTo exploit this vulnerability, an attacker would need to craft a URL containing a malicious script payload within a spec…","severity":"medium","cvss":6.6,"cvssVector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N","cvssSource":"cna","cwe":["CWE-79"],"vendor":"Stormshield","product":"Stormshield Network Security","affected":["network_security >= 5.0.0 <= 5.0.9","network_security >= 5.1.0 <= 5.1.3"],"published":"2026-10-20","updated":"2026-10-20","sourceUpdated":"2026-10-20T08:09:33.956Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-113465","references":[{"url":"https://advisories.stormshield.eu/2026-022/"}],"tags":["cve.org"],"ingestedAt":"2026-10-20T12:05:07.358Z","slug":"CVE-2026-113465","body":"## Overview\n\nIt is possible to execute a DOM-based Cross-Site Scripting attack against Stormshield’s web administration panel.\n\n\n\nTo exploit this vulnerability, an attacker would need to craft a URL containing a malicious script payload within a specific parameter and lure an authenticated administrator into visiting that link.\n\n## Affected\n\n- `network_security >= 5.0.0 <= 5.0.9`\n- `network_security >= 5.1.0 <= 5.1.3`\n\n## Remediation\n\nThe following updates will fix this vulnerability:\n  *  SNS 5.1.4 EA\n\n  *  SNS 5.0.10\n\n### Workarounds\n\nThere is no workaround solution.","depth":"sunlit","depthScore":36,"depthScoreParts":{"impact":36.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}