{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3astormshieldsns/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:stormshield:sns:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-113469"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["SNS"],"_cs_severities":["high"],"_cs_tags":["vulnerability","network-security"],"_cs_type":"advisory","_cs_vendors":["Stormshield"],"content_html":"\u003cp\u003eA logic error has been identified in Stormshield Network Security (SNS) appliances related to the verification of dynamic data file signatures. During the automatic update (autoupdate) routine, the appliance fails to correctly validate the integrity and authenticity of incoming dynamic data files. This vulnerability enables an attacker capable of intercepting or manipulating the update traffic to supply unauthenticated dynamic data to the device. By bypassing these signature checks, an attacker could potentially force the appliance to process malicious configurations or unauthorized code disguised as legitimate dynamic updates, leading to a compromise of the security appliance's integrity.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows for the execution of unauthorized updates, which can be leveraged to alter device configuration, inject malicious logic, or compromise the network security posture managed by the SNS appliance. This represents a significant risk to the security of any network environment protected by vulnerable SNS firmware.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eVerify the current firmware version of all deployed Stormshield Network Security appliances.\u003c/li\u003e\n\u003cli\u003eImplement strict network-level controls for devices performing autoupdates, including pinning the update server FQDN and enforcing TLS inspection if the traffic is not already mutually authenticated.\u003c/li\u003e\n\u003cli\u003eApply the security patch provided by Stormshield to remediate CVE-2026-113469 as soon as it becomes available.\u003c/li\u003e\n\u003cli\u003eMonitor appliance logs for unexpected modification of dynamic data configurations or unusual autoupdate error messages.\u003c/li\u003e\n\u003c/ol\u003e\n","date_modified":"2026-10-20T10:32:54Z","date_published":"2026-10-20T10:32:54Z","id":"https://feed.craftedsignal.io/briefs/2026-10-sns-signature-bypass/","summary":"A logic error in the Stormshield Network Security (SNS) dynamic data file signature verification routine allows attackers to bypass validation and inject unauthenticated updates during the autoupdate process.","title":"Stormshield Network Security: Dynamic data signature verification logic error (CVE-2026-113469)","url":"https://feed.craftedsignal.io/briefs/2026-10-sns-signature-bypass/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:stormshield:sns:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}