# CVE-2026-8482: Stormshield Network Security information leak in CLI history

Source: https://junglewise.ai/threats/cve-2026-8482-stormshield-network-security-information-leak-in-cli-history  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-02. Updated: 2026-07-02  
License: CC BY 4.0 with a link back

CVE-2026-8482 · Severity: medium · CVSS 4.3 · Published 2026-07-02

A security vulnerability has been identified in Stormshield Network Security firewalls that could allow sensitive administrative credentials to be exposed. If multiple administrators have access to the device's command-line interface, one user may be able to view secret information entered by another, such as encryption passphrases or hardware security passwords. This could lead to an unauthorized person gaining deeper access to the network's security infrastructure.

Technologies: [Stormshield Network Security](https://junglewise.ai/threats/technologies/network-security). Vendors: [Stormshield](https://junglewise.ai/threats/vendors/stormshield).

## Quick answers

**Is CVE-2026-8482 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-8482 being exploited in the wild.

**How severe is CVE-2026-8482?** Medium severity, with a CVSS score of 4.3, published 2 July 2026.

**Which products and versions are affected?** Stormshield Network Security 4.3.0 to 4.3.41, 4.8.0 to 4.8.15, 5.0.0 to 5.0.5.

**Is there a fix for CVE-2026-8482?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-8482 attacked?** It is attacked from the adjacent network, in a network appliance.

**Am I affected by CVE-2026-8482?** Check whether you run Stormshield Network Security at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

An information leak vulnerability (CWE-532) exists in the NSRPC client history of Stormshield Network Security (SNS). When administrators use the CLI command-line tool to execute commands, sensitive information such as the proxy CA passphrase or TPM password may be recorded in a way that is accessible to other users with SSH access to the firewall (specifically when SSH multiuser mode is enabled). The attack vector is classified as 'Adjacent' with high privileges required and user interaction. The vulnerability is addressed in versions 4.3.42, 4.8.16, and 5.0.6.

## Affected products

- Stormshield Stormshield Network Security 4.3.0 to 4.3.41, 4.8.0 to 4.8.15, 5.0.0 to 5.0.5

## Timeline

- 2025-05-26: disclosed: Vulnerability discovered
- 2025-12-29: advisory: Initial advisory release (v1)
- 2026-07-02: advisory: NVD publication date

## References

- [https://advisories.stormshield.eu/2025-007/](https://advisories.stormshield.eu/2025-007/)