---
id: CVE-2026-113465
title: Possible DOM XSS in SNS Web Administration Portal
summary: >-
  It is possible to execute a DOM-based Cross-Site Scripting attack against
  Stormshield’s web administration panel.




  To exploit this vulnerability, an attacker would need to craft a URL
  containing a malicious script payload within a spec…
severity: medium
cvss: 6.6
cvssVector: 'CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N'
cvssSource: cna
cwe:
  - CWE-79
vendor: Stormshield
product: Stormshield Network Security
affected:
  - network_security >= 5.0.0 <= 5.0.9
  - network_security >= 5.1.0 <= 5.1.3
published: '2026-10-20'
updated: '2026-10-20'
sourceUpdated: '2026-10-20T08:09:33.956Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-113465'
references:
  - url: 'https://advisories.stormshield.eu/2026-022/'
tags:
  - cve.org
ingestedAt: '2026-10-20T12:05:07.358Z'
---

## Overview

It is possible to execute a DOM-based Cross-Site Scripting attack against Stormshield’s web administration panel.



To exploit this vulnerability, an attacker would need to craft a URL containing a malicious script payload within a specific parameter and lure an authenticated administrator into visiting that link.

## Affected

- `network_security >= 5.0.0 <= 5.0.9`
- `network_security >= 5.1.0 <= 5.1.3`

## Remediation

The following updates will fix this vulnerability:
  *  SNS 5.1.4 EA

  *  SNS 5.0.10

### Workarounds

There is no workaround solution.