Is CVE-2026-14466 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-14466?

CVE-2026-14466 has a CVSS v3 severity of MEDIUM (4.3).

Back

CVE-2026-14466

Description

It’s possible to run a stored XSS in Stormshield’s web administration panel. To exploit this vulnerability, a SNS administrator with appropriate permissions must inject some malicious script in a group’s comments in the webservices administration interface.