Vulnerability · Published Jul 2, 2026 · Assigned by airbus
CVE-2026-8482Information leak in NSRPC client history
Medium 4.3
In plain English
A medium-severity sensitive data in logs in Stormshield Network Security from Stormshield. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities).
Official description
A vulnerability was discovered on StormShield Network Security 4.3.0 to 4.3.41 (included), 4.8.0 to 4.8.15 (included) , 5.0.0 to 5.0.5 (included) There is a possible leak of secret information if administration commands have been passed with the CLI command line tool. Someone with SSH access to the firewall (if SSH multiuser mode is enabled) could possibly get the proxy CA passphrase or TPM password.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Stormshield | Stormshield Network Security | 4.3.0 – through 4.3.414.8.0 – through 4.8.155.0.0 – through 5.0.5 |
Weakness: CWE-532 · Vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N