CVE-2026-8480
Connection possible to the Administration portal with a revoked certificate
Description
A vulnerability was discovered on Stormshield Network Security 4.3.0 to 4.3.41 (included), 4.4.0 to 4.8.15 (included) , 5.0.2 EA to 5.0.5 (included) A revoked client certificate can still be used to authenticate to the captive‑admin portal, allowing an attacker who possesses the revoked certificate to gain administrative access.
INFO
Published Date :
July 1, 2026, 2:52 p.m.
Last Modified :
July 1, 2026, 2:52 p.m.
Remotely Exploit :
No
Source :
airbus
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 3.1 | MEDIUM | 24a3c815-5f22-4d74-967a-30958d6466f4 | ||||
| CVSS 3.1 | MEDIUM | MITRE-CVE | ||||
| CVSS 3.1 | MEDIUM | [email protected] |
Solution
- Update Stormshield firmware to the latest version.
- Verify certificate revocation status is enforced.
- Restart relevant network services.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-8480 vulnerability anywhere in the article.