Stormshield Network Security: Dynamic data signature verification logic error (CVE-2026-113469)

A logic error has been identified in Stormshield Network Security (SNS) appliances related to the verification of dynamic data file signatures. During the automatic update (autoupdate) routine, the appliance fails to correctly validate the integrity and authenticity of incoming dynamic data files. This vulnerability enables an attacker capable of intercepting or manipulating the update traffic to supply unauthenticated dynamic data to the device. By bypassing these signature checks, an attacker could potentially force the appliance to process malicious configurations or unauthorized code disguised as legitimate dynamic updates, leading to a compromise of the security appliance's integrity.

Impact

Successful exploitation allows for the execution of unauthorized updates, which can be leveraged to alter device configuration, inject malicious logic, or compromise the network security posture managed by the SNS appliance. This represents a significant risk to the security of any network environment protected by vulnerable SNS firmware.

Recommendation

1. Verify the current firmware version of all deployed Stormshield Network Security appliances.
2. Implement strict network-level controls for devices performing autoupdates, including pinning the update server FQDN and enforcing TLS inspection if the traffic is not already mutually authenticated.
3. Apply the security patch provided by Stormshield to remediate CVE-2026-113469 as soon as it becomes available.
4. Monitor appliance logs for unexpected modification of dynamic data configurations or unusual autoupdate error messages.