s
stormshield
Security Risk Profile
41
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 68 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 4, 2019 to present
68
Total CVEs
31
Critical+High
0
Exploited
20
Unpatched
Threat Assessment
Avg CVSS
6.5
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
20
Critical/High
Risk Level
41/100
medium
📈 3 in Last 30 Days
Severity Distribution
Critical
5High
26Medium
36Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
XSS
10
2
Buffer Overflow
3
3
Null Pointer Dereference
3
4
Input Validation
2
5
Use After Free
2
Most Affected Products
1. Stormshield Stormshield Network Security115
2. alpine/openssl44
3. alpine/nodejs36
4. Stormshield Network Security34
5. alpine/nodejs-current27
Recent Vulnerabilities
See more →CVE-2026-111088
CVSS 6.5medium
Stored XSS in the VPN logs monitor
Oct 20, 2026🔧 No Patch
CVE-2026-113465
CVSS 6.6medium
Possible DOM XSS in SNS Web Administration Portal
Oct 20, 2026🔧 No Patch
CVE-2026-111090
CVSS 7.8high
Improper Signature Verification of Firmware Update Files
Oct 20, 2026🔧 No Patch
CVE-2026-8482
CVSS 4.3medium
Information leak in NSRPC client history
Jul 2, 2026🔧 No Patch
CVE-2026-8480
CVSS 4.3medium
Connection possible to the Administration portal with a revoked certificate
Jul 1, 2026🔧 No Patch
CVE-2026-8474
CVSS 5.3EPSS 0%medium
Possible to run a Cross Site Scripting request on the login API available on Stormshield SNS appliances.
Jun 1, 2026🔧 No Patch
CVE-2025-48707
CVSS 7.5high
Sep 25, 2025🔧 No Patch
CVE-2025-27829
CVSS 7.3high
Apr 1, 2025🔧 No Patch
CVE-2024-37386
CVSS 4.2medium
Jul 15, 2024🔧 No Patch
CVE-2024-31946
CVSS 4.2medium
Jul 15, 2024🔧 No Patch
Monitor stormshield in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.