Multiples vulnérabilités dans les produits StormShield

{
  "id": "caa9f36acdc70b4803a350d2fb5956ab0c5732863333ecb4dc2ff892b7daedd8",
  "url": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1345/",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "Multiples vulnérabilités dans les produits StormShield",
    "summary": "Multiple vulnerabilities affect StormShield Management Center and Stormshield Network Security. The advisory lists corrected release thresholds; some vulnerabilities may enable arbitrary code execution, remote denial of service, or data confidentiality breaches.",
    "evidence": "De multiples vulnérabilités ont été découvertes dans les produits StormShield. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, un déni de service à distance et une atteinte à la confidentialité des données.",
    "products": [
      {
        "name": {
          "value": "Stormshield Management Center",
          "evidence": "Stormshield Management Center versions 3.9.x antérieures à 3.9.3"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "3.9.3",
            "evidence": "Stormshield Management Center versions 3.9.x antérieures à 3.9.3"
          }
        ],
        "affected_versions": [
          {
            "value": "3.9.x antérieures à 3.9.3",
            "evidence": "Stormshield Management Center versions 3.9.x antérieures à 3.9.3"
          }
        ]
      },
      {
        "name": {
          "value": "Stormshield Network Security",
          "evidence": "Stormshield Network Security versions 4.3.x antérieures à 4.3.45 QS"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "4.3.45 QS",
            "evidence": "Stormshield Network Security versions 4.3.x antérieures à 4.3.45 QS"
          },
          {
            "value": "4.8.20 LTSB",
            "evidence": "Stormshield Network Security versions 4.8.x antérieures à 4.8.20 LTSB"
          },
          {
            "value": "5.0.10",
            "evidence": "Stormshield Network Security versions 5.0.x antérieures à 5.0.10"
          },
          {
            "value": "5.1.4 EA",
            "evidence": "Stormshield Network Security versions 5.1.x antérieures à 5.1.4 EA"
          }
        ],
        "affected_versions": [
          {
            "value": "4.3.x antérieures à 4.3.45 QS",
            "evidence": "Stormshield Network Security versions 4.3.x antérieures à 4.3.45 QS"
          },
          {
            "value": "4.8.x antérieures à 4.8.20 LTSB",
            "evidence": "Stormshield Network Security versions 4.8.x antérieures à 4.8.20 LTSB"
          },
          {
            "value": "5.0.x antérieures à 5.0.10",
            "evidence": "Stormshield Network Security versions 5.0.x antérieures à 5.0.10"
          },
          {
            "value": "5.1.x antérieures à 5.1.4 EA",
            "evidence": "Stormshield Network Security versions 5.1.x antérieures à 5.1.4 EA"
          }
        ]
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2026-113808",
        "evidence": "Référence CVE CVE-2026-113808"
      },
      {
        "value": "CVE-2026-113810",
        "evidence": "Référence CVE CVE-2026-113810"
      },
      {
        "value": "CVE-2026-14666",
        "evidence": "Référence CVE CVE-2026-14666"
      },
      {
        "value": "CVE-2026-15741",
        "evidence": "Référence CVE CVE-2026-15741"
      },
      {
        "value": "CVE-2026-18408",
        "evidence": "Référence CVE CVE-2026-18408"
      },
      {
        "value": "CVE-2026-34181",
        "evidence": "Référence CVE CVE-2026-34181"
      },
      {
        "value": "CVE-2026-42768",
        "evidence": "Référence CVE CVE-2026-42768"
      },
      {
        "value": "CVE-2026-45447",
        "evidence": "Référence CVE CVE-2026-45447"
      },
      {
        "value": "CVE-2026-48931",
        "evidence": "Référence CVE CVE-2026-48931"
      },
      {
        "value": "CVE-2026-56850",
        "evidence": "Référence CVE CVE-2026-56850"
      },
      {
        "value": "CVE-2026-58040",
        "evidence": "Référence CVE CVE-2026-58040"
      },
      {
        "value": "CVE-2026-58045",
        "evidence": "Référence CVE CVE-2026-58045"
      },
      {
        "value": "CVE-2026-78123",
        "evidence": "Référence CVE CVE-2026-78123"
      },
      {
        "value": "CVE-2026-78124",
        "evidence": "Référence CVE CVE-2026-78124"
      },
      {
        "value": "CVE-2026-78129",
        "evidence": "Référence CVE CVE-2026-78129"
      },
      {
        "value": "CVE-2026-78130",
        "evidence": "Référence CVE CVE-2026-78130"
      },
      {
        "value": "CVE-2026-78131",
        "evidence": "Référence CVE CVE-2026-78131"
      },
      {
        "value": "CVE-2026-78135",
        "evidence": "Référence CVE CVE-2026-78135"
      },
      {
        "value": "CVE-2026-84732",
        "evidence": "Référence CVE CVE-2026-84732"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "official-cert-fr-advisories",
  "document_id": 23330,
  "published_at": "2026-10-21T00:00:00+00:00"
}