CVE-2026-8482

medium

Description

A vulnerability was discovered on StormShield Network Security 4.3.0 to 4.3.41 (included), 4.8.0 to 4.8.15 (included) , 5.0.0 to 5.0.5 (included) There is a possible leak of secret information if administration commands have been passed with the CLI command line tool. Someone with SSH access to the firewall (if SSH multiuser mode is enabled) could possibly get the proxy CA passphrase or TPM password.

References

https://advisories.stormshield.eu/2025-007/

Details

Source: Mitre, NVD

Published: 2026-07-02

Updated: 2026-07-02

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:A/AC:L/Au:M/C:C/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 4.3

Vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N

Severity: Medium

EPSS

EPSS: 0.00212