Thales Sconnect vulnerabilities

1 vulnerability

Known vulnerabilities in Thales Sconnect, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.4CVE-2026-18397thalessconnect
EPSS score
0.34%
This vulnerability enables unauthenticated remote code execution (RCE) on a victim's machine by exploiting a combination of cryptographic weaknesses and memory management issues in the SConnect native host component. The attack leverages an unrestricted messaging interface between an attacker-controlled web page and the native host, allowing malicious input to bypass security checks.