CVE-2026-8482: Information leak in NSRPC client history
A vulnerability was discovered on StormShield Network Security 4.3.0 to 4.3.41 (included), 4.8.0 to 4.8.15 (included) , 5.0.0 to 5.0.5 (included)
There is a possible leak of secret information if administration commands have been passed with the CLI command line tool.
Someone with SSH access to the firewall (if SSH multiuser mode is enabled) could possibly get the proxy CA passphrase or TPM password.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
StormShield Network Securityto a version that resolves this vulnerability.Fixed in 4.3.42 - Upgrade
Upgrade
StormShield Network Securityto a version that resolves this vulnerability.Fixed in 4.8.16 - Upgrade
Upgrade
StormShield Network Securityto a version that resolves this vulnerability.Fixed in 5.0.6
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8482?
The severity of CVE-2026-8482 is classified as medium with a score of 4.3.
What is the risk associated with CVE-2026-8482?
CVE-2026-8482 carries a risk rating of 25.
How do I fix CVE-2026-8482?
To fix CVE-2026-8482, you should upgrade to StormShield Network Security versions above 4.3.41, 4.8.15, and 5.0.5.
What type of information leak does CVE-2026-8482 involve?
CVE-2026-8482 involves a possible leak of secret information through administration commands transmitted via the CLI command line tool.
Who is affected by CVE-2026-8482?
CVE-2026-8482 affects users of StormShield Network Security versions 4.3.0 to 4.3.41, 4.8.0 to 4.8.15, and 5.0.0 to 5.0.5.