CVE-2026-113465CWE-79cross-site-scripting
CVE-2026-113465
Medium · published October 20, 2026
What it is
It is possible to execute a DOM-based Cross-Site Scripting attack against Stormshield’s web administration panel.
To exploit this vulnerability, an attacker would need to craft a URL containing a malicious script payload within a specific parameter and lure an authenticated administrator into visiting that link.
The record
Technical detail
- CVSS v3.1
- 6.6 · MEDIUM
- Vector
- CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00182 · 7.4th percentile
- Weakness
- CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
- Published
- 2026-10-20T13:17Z
References (1)
EPSS history
Timeline