Skip to content
OpenAdvisories
Critical ICSA-26-181-06 5 CVEs

StoneFly Storage Concentrator

Published Jun 30, 2026 · Updated Jun 30, 2026

Vendor: StoneFly Product: Storage Concentrator Product: Storage Concentrator Virtual Machine

Summary

Successful exploitation of these vulnerabilities could allow attackers to gain broad unauthorized access, execute arbitrary commands with root privileges, steal sensitive data, and perform actions on behalf of legitimate users across interconnected systems.

Vulnerabilities 5

  • Critical 10.0
    CVE-2026-56413

    OS Command Injection in StoneFly Storage Concentrator

    Storage Concentrator (SC & SCVM) contains a command injection vulnerability in the ms_service.pl service, which listens on TCP port 9000 by default and accepts custom network packets to perform device actions. An unauthenticated remote attacker can send a spe…

    StoneFly Storage Concentrator Virtual Machine Storage Concentrator
  • Critical 10.0
    CVE-2026-56415

    OS Command Injection in StoneFly Storage Concentrator

    Storage Concentrator (SC & SCVM) contains a command injection vulnerability within the debug.pl script that is reachable without authentication. A remote attacker can submit a specially crafted HTTP request containing a malicious payload that is processed wit…

    StoneFly Storage Concentrator Storage Concentrator Virtual Machine
  • Critical 9.3
    CVE-2026-55721

    SQL Injection in StoneFly Storage Concentrator

    Storage Concentrator (SC & SCVM) is vulnerable to SQL injection through cookie values processed by the login.pl and debug.pl scripts. The cookie value is incorporated directly into database queries without adequate sanitization, allowing an unauthenticated re…

    StoneFly Storage Concentrator Virtual Machine Storage Concentrator
  • Critical 9.2
    CVE-2026-50110

    Use of Hard-coded Credentials in StoneFly Storage Concentrator

    Storage Concentrator (SC & SCVM) contains hardcoded credentials for numerous internal services embedded within a configuration file. While the credentials are stored in an encoded format, the encoding can be reversed to plaintext. The exposed credentials span…

    StoneFly Storage Concentrator Virtual Machine Storage Concentrator
  • Medium 6.1
    CVE-2026-50040

    Cross-site Scripting in StoneFly Storage Concentrator

    Storage Concentrator (SC & SCVM) is vulnerable to reflected cross-site scripting due to unsanitized content being echoed back in 404 error pages. An attacker can craft a malicious URL that, when visited by an authenticated user, causes arbitrary script conten…

    StoneFly Storage Concentrator Storage Concentrator Virtual Machine

Revision history

  1. #1

    Initial Publication

References