https://vulnogram.org/ Most recent CVEs assigned by Thales Group (tha-psirt). https://vulnogram.org/seaview/icons/tha-psirt.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-18397 https://vulnogram.org/CVE-2026-18397 This vulnerability enables unauthenticated remote code execution (RCE) on a victim's machine by exploiting a combination of cryptographic weaknesses and memory management issues in the SConnect native host component. The attack leverages an unrestric… Critical Network Exploitable Thu, 01 Oct 2026 21:49:42 GMT https://vulnogram.org/CVE-2026-13014 https://vulnogram.org/CVE-2026-13014 A vulnerability in Thales CERT "Suspicious" application =< 1.3.4 allows a remote and unauthenticated attacker to execute arbitrary code and arbitrarily overwrite writable application files—including Python modules, configuration files, cron inputs, a… Critical Network Exploitable Mon, 13 Jul 2026 09:42:45 GMT https://vulnogram.org/CVE-2026-6805 https://vulnogram.org/CVE-2026-6805 Vulnerability on the external sharing feature in Cryptobox allows an attacker knowing a sharing link URL to retrieve information from the server allowing an offline brute-force attack of the access code associated to this sharing link. Medium Network Exploitable Thu, 07 May 2026 09:45:42 GMT https://vulnogram.org/CVE-2026-5794 https://vulnogram.org/CVE-2026-5794 A vulnerability affecting the detailed versions of Cryptobox allows a legitimate user to prevent another to login by triggering an account lockout via sending a specially crafted request. Medium Tue, 28 Apr 2026 17:09:55 GMT https://vulnogram.org/CVE-2026-3457 https://vulnogram.org/CVE-2026-3457 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Thales Sentinel LDK Runtime on Windows allows Stored XSS. This issue affects Sentinel LDK Runtime: before 10.22. High Fri, 27 Mar 2026 09:05:48 GMT https://vulnogram.org/CVE-2026-0872 https://vulnogram.org/CVE-2026-0872 Improper Certificate Validation vulnerability in Thales SafeNet Agent for Windows Logon on Windows allows Signature Spoofing by Improper Validation. This issue affects SafeNet Agent for Windows Logon: 4.0.0, 4.1.1, 4.1.2. Low Fri, 13 Feb 2026 08:53:05 GMT https://vulnogram.org/CVE-2026-0873 https://vulnogram.org/CVE-2026-0873 On a Cryptobox platform where administrator segregation based on entities is used, some vulnerabilities in Ercom Cryptobox administration console allows an authenticated entity administrator with knowledge to elevate his account to global administrat… Medium Wed, 04 Feb 2026 10:42:14 GMT https://vulnogram.org/CVE-2025-14266 https://vulnogram.org/CVE-2025-14266 CSRF in Ercom Cryptobox administration console allows attacker to trigger some actions on behalf of a Cryptobox administrator. The attack requires the administrator to browse a malicious web site or to click a link while he has an open session on the… Low Network Exploitable Wed, 17 Dec 2025 13:38:22 GMT https://vulnogram.org/CVE-2024-5264 https://vulnogram.org/CVE-2024-5264 Network Transfer with AES KHT in Thales Luna EFT 2.1 and above allows a user with administrative console access to access backups taken via offline analysis Medium Thu, 23 May 2024 08:40:56 GMT https://vulnogram.org/CVE-2024-0197 https://vulnogram.org/CVE-2024-0197 A flaw in the installer for Thales SafeNet Sentinel HASP LDK prior to 9.16 on Windows allows an attacker to escalate their privilege level via local access. High Tue, 27 Feb 2024 12:48:13 GMT https://vulnogram.org/CVE-2023-7016 https://vulnogram.org/CVE-2023-7016 A flaw in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to execute code at a SYSTEM level via local access. High Tue, 27 Feb 2024 10:45:28 GMT https://vulnogram.org/CVE-2023-5993 https://vulnogram.org/CVE-2023-5993 A flaw in the Windows Installer in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to escalate their privilege level via local access. High Tue, 27 Feb 2024 10:42:08 GMT https://vulnogram.org/CVE-2023-2737 https://vulnogram.org/CVE-2023-2737 Improper log permissions in SafeNet Authentication Service Version 3.4.0 on Windows allows an authenticated attacker to cause a denial of service via local privilege escalation. Medium Wed, 16 Aug 2023 15:45:29 GMT https://vulnogram.org/CVE-2022-1293 https://vulnogram.org/CVE-2022-1293 The embedded neutralization of Script-Related HTML Tag, was by-passed in the case of some extra conditions. Medium Tue, 02 Aug 2022 15:24:27 GMT https://vulnogram.org/CVE-2021-42811 https://vulnogram.org/CVE-2021-42811 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in SafeNet KeySecure allows an authenticated user to read arbitrary files from the underlying system on which the product is deployed. Low Fri, 10 Jun 2022 10:20:32 GMT https://vulnogram.org/CVE-2021-42810 https://vulnogram.org/CVE-2021-42810 A flaw in the previous versions of the product may allow an authenticated attacker the ability to execute code as a privileged user on a system where the agent is installed. High Wed, 19 Jan 2022 17:12:02 GMT https://vulnogram.org/CVE-2021-42808 https://vulnogram.org/CVE-2021-42808 Improper Access Control in Thales Sentinel Protection Installer could allow a local user to escalate privileges. Medium Mon, 20 Dec 2021 20:19:10 GMT https://vulnogram.org/CVE-2021-42138 https://vulnogram.org/CVE-2021-42138 A user of a machine protected by SafeNet Agent for Windows Logon may leverage weak entropy to access the encrypted credentials of any or all the users on that machine. High Mon, 20 Dec 2021 20:19:10 GMT https://vulnogram.org/CVE-2021-42809 https://vulnogram.org/CVE-2021-42809 Improper Access Control of Dynamically-Managed Code Resources (DLL) in Thales Sentinel Protection Installer could allow the execution of arbitrary code. Medium Mon, 20 Dec 2021 20:19:09 GMT