Stormshield vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-113810 A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal.High 7 · Oct 20, 2026
• CVE-2026-113808 A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal.High 7.1 · Oct 20, 2026
• CVE-2026-113469 A failure has been identified in the SNS during dynamic data files signature check.High 7.5 · Oct 20, 2026
• CVE-2026-111090 A logic error exists in the signature verification routine resulting in acceptance of unauthenticated update and license files.It is necessary to use only the MHigh 7.8 · Oct 20, 2026
• CVE-2025-48707 An issue was discovered in Stormshield Network Security (SNS) before 5.0.1.High 7.5 · Sep 25, 2025
• CVE-2023-34198 In Stormshield Network Security (SNS) 1.0.0 through 3.7.36 before 3.7.37, 3.8.0 through 3.11.24 before 3.11.25, 4.0.0 through 4.3.18 before 4.3.19, 4.4.0 througHigh 7.3 · Feb 28, 2024
• CVE-2023-28616 An issue was discovered in Stormshield Network Security (SNS) before 4.3.17, 4.4.x through 4.6.x before 4.6.4, and 4.7.x before 4.7.1.High 7.5 · Dec 25, 2023
• CVE-2023-47091 An issue was discovered in Stormshield Network Security (SNS) SNS 4.3.13 through 4.3.22 before 4.3.23, SNS 4.6.0 through 4.6.9 before 4.6.10, and SNS 4.7.0 throHigh 7.5 · Dec 25, 2023
• CVE-2023-26095 ASQ in Stormshield Network Security (SNS) 4.3.15 before 4.3.16 and 4.6.x before 4.6.3 allows a crash when analysing a crafted SIP packet.High 7.5 · Aug 28, 2023
• CVE-2021-27932 Stormshield Network Security (SNS) VPN SSL Client 2.1.0 through 2.8.0 has Insecure Permissions.High 7.8 · Aug 25, 2023
• CVE-2022-46782 An issue was discovered in Stormshield SSL VPN Client before 3.2.0.High 7.8 · Aug 4, 2023
• CVE-2022-27812 Flooding SNS firewall versions 3.7.0 to 3.7.29, 3.11.0 to 3.11.17, 4.2.0 to 4.2.10, and 4.3.0 to 4.3.6 with specific forged traffic, can lead to SNS DoS.High 7.5 · Aug 24, 2022
• CVE-2022-30279 An issue was discovered in Stormshield Network Security (SNS) 4.3.x before 4.3.8.High 7.5 · May 12, 2022
• CVE-2022-23989 In Stormshield Network Security (SNS) before 3.7.25, 3.8.x through 3.11.x before 3.11.13, 4.x before 4.2.10, and 4.3.x before 4.3.5, a flood of connections to tHigh 7.5 · Mar 15, 2022
• CVE-2021-31617 In ASQ in Stormshield Network Security (SNS) 1.0.0 through 2.7.8, 2.8.0 through 2.16.0, 3.0.0 through 3.7.20, 3.8.0 through 3.11.8, and 4.0.1 through 4.2.2, misCritical 9.8 · Jan 31, 2022
• CVE-2021-28962 Stormshield Network Security (SNS) before 4.2.2 allows a read-only administrator to gain privileges via CLI commands.High 7.2 · Jan 31, 2022
• CVE-2021-45885 An issue was discovered in Stormshield Network Security (SNS) 4.2.2 through 4.2.7 (fixed in 4.2.8).High 7.5 · Dec 29, 2021
• CVE-2021-45090 Stormshield Endpoint Security before 2.1.2 allows remote code execution.Critical 9.8 · Dec 21, 2021
• CVE-2021-31225 SES Evolution before 2.1.0 allows deleting some resources not currently in use by any security policy by leveraging access to a computer having the administratiHigh 7.3 · Jul 13, 2021
• CVE-2021-28127 An issue was discovered in Stormshield SNS through 4.2.1.High 7.5 · Jul 1, 2021
• CVE-2021-28665 Stormshield SNS with versions before 3.7.18, 3.11.6 and 4.1.6 has a memory-management defect in the SNMP plugin that can lead to excessive consumption of memoryHigh 7.5 · May 6, 2021
• CVE-2018-20850 Stormshield Network Security 2.0.0 through 2.13.0 and 3.0.0 through 3.7.1 has self-XSS in the command line interface of the SNS web server.High 8.2 · Jul 4, 2019