CVE-2026-113808
7.1HighPublished 20 Oct 2026 · NVD status: Deferred · AI triage by gemini-3.8-flash
- Attack vector
- Adjacent network
- Complexity
- High
- Privileges needed
- None
- User interaction
- Required
- Impact
- Full C/I/A compromise
- Weakness
- CWE-79
Impact
An attacker with adjacent network access can hijack administrator sessions or run arbitrary script in their browser. They need access to the captive portal to submit a malicious user creation request and must wait for an administrator to inspect or validate it.
Root cause
The SNS enrollment portal fails to sanitize user inputs during account registration, allowing malicious payloads to be stored and executed in the administrative interface.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Fix & remediation
Check the Stormshield advisory (2026-026) for the patched firmware version to apply. As an interim mitigation, restrict access to the captive portal to trusted networks or suspend manual user creation validation via the portal.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal. Through the captive portal an attacker can inject an XSS when requesting user creation. The stored XSS can only be triggered during validation by the administrator.