CVE-2026-14466

[Support]

CVE-2026-14466
It’s possible to run a stored XSS in Stormshield’s web administration panel.



To exploit this vulnerability, a SNS administrator with appropriate permissions must inject some malicious script in a group’s comments in the webservices administration interface.