CVE-2026-8482

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 29/100
Published: 2026-07-02 Modified: 2026-10-25 First seen: 2026-10-29 Status: active

Attack Surface

Adjacent Low Complexity Conf. Impact

CVSS Vector Breakdown

AV: Adjacent
AC: Low
PR: High
UI: Required
S: Unchanged
C: High
I: None
A: None

Description

A vulnerability was discovered on StormShield Network Security 4.3.0 to 4.3.41 (included), 4.8.0 to 4.8.15 (included) , 5.0.0 to 5.0.5 (included) There is a possible leak of secret information if administration commands have been passed with the CLI command line tool. Someone with SSH access to the firewall (if SSH multiuser mode is enabled) could possibly get the proxy CA passphrase or TPM password.

Weakness Classification (1)

References & Advisories (1)

Bug Bounty Relevance

29 / 100
✓ Low complexity

CVSS Score

4.3 / 10.0 v3.1
CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N

EPSS — Exploitation Probability

0.23%
Raw Score 0.002280
Percentile 13.6%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00228
2026-10-28
0.00228

Intelligence Sources

nvd ref →