CVE-2026-8482
CWE-532Published: July 2, 2026· Updated: Jul 2, 2026
Official Description
A vulnerability was discovered on StormShield Network Security 4.3.0 to 4.3.41 (included), 4.8.0 to 4.8.15 (included) , 5.0.0 to 5.0.5 (included)
There is a possible leak of secret information if administration commands have been passed with the CLI command line tool.
Someone with SSH access to the firewall (if SSH multiuser mode is enabled) could possibly get the proxy CA passphrase or TPM password.
Technical Analysis
CVE-2026-8482 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.
Exploitation requires high privileges, which limits the exposure to scenarios where an attacker has already gained initial access.
A successful exploit results in complete confidentiality breach (data exposure), with a CVSS base score of 4.3.
CVSS v3.1 Vector Breakdown
Exploit & PoC Resources
All References (1)
Quick Facts
Related CVEs (CWE-532)
Recommended Actions
- →Apply vendor patches immediately
- →Monitor CVE-2026-8482 in threat intel feeds
- →Review IDS/IPS signatures for exploitation attempts