CVE-2026-111088

Deferred Deferred - Pending Action

Stored XSS in SNS VPN Log Monitoring Screen

Publication date: 2026-10-20

Last updated on: 2026-10-20

Assigner: Airbus

Description

A Stored Cross-Site Scripting vulnerability exists in the SNS VPN log monitoring screen.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-20

Last Modified

2026-10-20

Generated

2026-10-22

AI Q&A

2026-10-21

EPSS Evaluated

N/A

NVD

CVE-2026-111088

EUVD

EUVD-2026-105258

Affected Vendors & Products

Vendor	Product	Version / Range
Stormshield	Stormshield	Network Security 4.3.0
Stormshield	Stormshield	Network Security 4.8.0
Stormshield	Stormshield	Network Security 5.0.0
Stormshield	Stormshield	Network Security 5.1.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-79	The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Attack-Flow Graph

Executive Summary

This is a Stored Cross-Site Scripting (XSS) vulnerability in the SNS VPN log monitoring screen. It occurs because the SSL VPN monitoring component does not properly sanitize certain log fields, allowing malicious scripts to be stored and later executed when the logs are viewed.

Detection Guidance

To detect this vulnerability, inspect VPN logs for unusual or malicious scripts in log fields. Check for logs containing HTML/JavaScript payloads like <script> tags. Use commands like grep to search logs for patterns such as 'onerror=' or 'javascript:' in the SNS VPN log monitoring screen.

Impact Analysis

An attacker could inject malicious scripts into VPN logs. When these logs are accessed, the scripts execute, potentially stealing sensitive data, session cookies, or performing actions on behalf of the user. The attack requires network access but no user interaction or elevated privileges.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating confidentiality requirements in GDPR and HIPAA. It may result in data breaches, triggering non-compliance penalties and legal consequences due to inadequate protection of personal or health information.

Mitigation Strategies

Immediately update to patched versions: SNS 5.1.4 EA, SNS 5.0.10, SNS 4.8.20 LTSB, or SNS 4.3.45 QS. If immediate patching is not possible, restrict access to the VPN logs monitoring screen and monitor for suspicious activity.

Hi! I’m here to help you understand CVE-2026-111088. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70