Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2026-18397

SConnect: Native Host Unauthenticated Remote Code Execution Vulnerability

This vulnerability enables unauthenticated remote code execution (RCE) on a victim's machine by exploiting a combination of cryptographic weaknesses and memory management issues in the SConnect native host component. The attack leverages an unrestricted messaging interface between an attacker-controlled web page and the native host, allowing malicious input to bypass security checks.

CVSS 4.0 · 9.4 Critical EPSS < 1% KEV · Not listed
Vendors
Thales
Products
Sconnect
CVE-2026-0872

Improper Certificate Validation vulnerability in Thales SafeNet Agent for Windows Logon

Improper Certificate Validation vulnerability in Thales SafeNet Agent for Windows Logon on Windows allows Signature Spoofing by Improper Validation. This issue affects SafeNet Agent for Windows Logon: 4.0.0, 4.1.1, 4.1.2.

CVSS 4.0 · 2.5 Low EPSS < 1% KEV · Not listed
Vendors
Thales Thalesgroup
Products
Safenet Agent For Windows Logon Safenet Agent For Windows Logon
CVE-2026-3457

Stored XSS vulnerability in Sentinel ACC

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Thales Sentinel LDK Runtime on Windows allows Stored XSS. This issue affects Sentinel LDK Runtime: before 10.22.

CVSS 4.0 · 7 High EPSS < 1% KEV · Not listed
Vendors
Thales Thalesgroup
Products
Sentinel Ldk Runtime Sentinel Ldk Runtime