Advisories · Technology

StoneFly Storage Concentrator Virtual Machine.

Every CVE that names StoneFly Storage Concentrator Virtual Machine among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-50110 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Use of Hard-coded Credentials in StoneFly Storage Concentrator
- StoneFly Storage Concentrator
- StoneFly Storage Concentrator Virtual Machine
- Hard-coded credentials
Not analysed yet 30 Jun 2026
CVE-2026-56413 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

OS Command Injection in StoneFly Storage Concentrator
- StoneFly Storage Concentrator
- StoneFly Storage Concentrator Virtual Machine
- Command injection
Not analysed yet 30 Jun 2026
CVE-2026-56415 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

OS Command Injection in StoneFly Storage Concentrator
- Stonefly Storage Concentrator
- Stonefly Storage Concentrator Virtual Machine
- Command injection
Not analysed yet 30 Jun 2026
CVE-2026-55721 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

SQL Injection in StoneFly Storage Concentrator
- StoneFly Storage Concentrator
- StoneFly Storage Concentrator Virtual Machine
- SQL injection
Not analysed yet 30 Jun 2026
CVE-2026-50040 CVE record

CVSS 5.1 Medium

Cross-site Scripting in StoneFly Storage Concentrator
- StoneFly Storage Concentrator
- StoneFly Storage Concentrator Virtual Machine
- Cross-site scripting (XSS)
Not analysed yet 30 Jun 2026