Thales vulnerabilities
10 vulnerabilities
Known vulnerabilities in Thales products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 10 products.
Products
10- Safenet Authentication Client2 vulnerabilities
- Sentinel Protection Installer2 vulnerabilities
- Citadel Macosx Desktop Client1 vulnerabilities
- Citadel Web Client1 vulnerabilities
- Citadel Windows Desktop Client1 vulnerabilities
- Luna EFT1 vulnerabilities
- Safenet Authentication Service1 vulnerabilities
- Safenet Authtentication Service Agent1 vulnerabilities
- Sconnect1 vulnerabilities
- Sentinel HASP LDK1 vulnerabilities
CVE-2021-42810thalessafenet authentication service+1
EPSS score0.32%
A flaw in the previous versions of the product may allow an authenticated attacker the ability to execute code as a privileged user on a system where the agent is installed.CVE-2021-42808thalessentinel protection installer+1EPSS score0.23%
Improper Access Control in Thales Sentinel Protection Installer could allow a local user to escalate privileges.CVE-2021-42809thalessentinel protection installer+1EPSS score0.30%
Improper Access Control of Dynamically-Managed Code Resources (DLL) in Thales Sentinel Protection Installer could allow the execution of arbitrary code.CVE-2022-1293thalescitadel macosx desktop client+3EPSS score0.49%
The embedded neutralization of Script-Related HTML Tag, was by-passed in the case of some extra conditions.CVE-2024-0197thalessentinel hasp ldk+1EPSS score0.43%
A flaw in the installer for Thales SafeNet Sentinel HASP LDK prior to 9.16 on Windows allows an attacker to escalate their privilege level via local access.CVE-2024-5264thalesluna eft+1EPSS score0.36%
Network Transfer with AES KHT in Thales Luna EFT 2.1 and above allows a user with administrative console access to access backups taken via offline analysisCVE-2026-18397thalessconnectEPSS score0.34%
This vulnerability enables unauthenticated remote code execution (RCE) on a victim's machine by exploiting a combination of cryptographic weaknesses and memory management issues in the SConnect native host component.
The attack leverages an unrestricted messaging interface between an attacker-controlled web page and the native host, allowing malicious input to bypass security checks.CVE-2023-2737thalessafenet authtentication service agent+1EPSS score0.14%
Improper log permissions in SafeNet Authentication Service Version 3.4.0 on Windows allows an authenticated attacker to cause a denial of service via local privilege escalation.CVE-2023-7016thalessafenet authentication client+1EPSS score0.34%
A flaw in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to execute code at a SYSTEM level via local access.CVE-2023-5993thalessafenet authentication client+1EPSS score0.17%
A flaw in the Windows Installer in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to escalate their privilege level via local access.