CVE-2026-8480

4.3 Moyenne

Publiée le 01/07/2026 à 18:16 · Modifiée le 01/07/2026 à 21:59 · En attente d'analyse NVD · Source : cert@airbus.com

Description

A vulnerability was discovered on Stormshield Network Security 4.3.0 to 4.3.41 (included), 4.4.0 to 4.8.15 (included) , 5.0.2 EA to 5.0.5 (included) A revoked client certificate can still be used to authenticate to the captive‑admin portal, allowing an attacker who possesses the revoked certificate to gain administrative access.

Traduire en français

Produits concernés

Stormshield Network Security

Scores CVSS

Version	Score	Source	Vecteur
3.1	4.3 Moyenne	cert@airbus.com	`CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N`

Faiblesses (CWE)

CWE-295

Références

https://advisories.stormshield.eu/2026-002/

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories