CVE-2026-113469

Published: Oct 20, 2026Modified: Oct 20, 2026Deferred

7.5

Vector

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.6 / Impact: 5.9

Source: cert@airbus.com (Secondary)

Description

A failure has been identified in the SNS during dynamic data files signature check. A logic error in the signature verification routine resulting in acceptance of unauthenticated dynamic data update during Autoupdate routine.

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (1)

https://advisories.stormshield.eu/2026-032/

Source: cert@airbus.com

Timeline

No history available yet.