CVE-2026-111088: Stored XSS in the VPN logs monitor
Published Oct 20, 2026
·Updated
A Stored Cross-Site Scripting vulnerability exists in the SNS VPN log monitoring screen.
Affected Software
1 affected component
Stormshield SNS
Event History
Oct 20, 2026
CVE Published
via MITRE·06:45 PM
Data Sourced
via MITRE·06:45 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What access and conditions are required for exploitation?
The vulnerability is remotely exploitable over the network with low attack complexity. The attacker requires low-level privileges, and no user interaction is required for exploitation.
2
What is the indicated security impact?
The vulnerability has a high confidentiality impact. No integrity or availability impact is indicated by the supplied CVSS vector.