CVE-2026-8482CWE-532

Information leak in NSRPC client history

Medium · published July 2, 2026

CVSS v3.1
4.3
EPSS
0%
Percentile
12.8
In the wild
Unconfirmed
What it is

A vulnerability was discovered on StormShield Network Security 4.3.0 to 4.3.41 (included), 4.8.0 to 4.8.15 (included) , 5.0.0 to 5.0.5 (included)

There is a possible leak of secret information if administration commands have been passed with the CLI command line tool.

Someone with SSH access to the firewall (if SSH multiuser mode is enabled) could possibly get the proxy CA passphrase or TPM password.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00228 · 12.8th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2026-07-02T08:42Z
EPSS history
Timeline
  • 02 JUL 08:42Z
    Information leak in NSRPC client history
    cvelistv5