Thales vulnerabilities

Products

• Safenet Authentication Client 2
• Safenet Authentication Service 2
• Sentinel Protection Installer 2

Newest

• thales sconnect SConnect: Native Host Unauthenticated Remote Code Execution Vulnerability CVE-2026-18397 9.4 CriticalOctober 1, 2026
• thales sentinel ldk runtime Stored XSS vulnerability in Sentinel ACC CVE-2026-3457 7.0 HighMarch 27, 2026
• thales safenet agent for windows logon Improper Certificate Validation vulnerability in Thales SafeNet Agent for Windows Logon CVE-2026-0872 2.5 LowFebruary 13, 2026
• thales luna eft Network Key Transfer with AES KHT vulnerability in Luna EFT CVE-2024-5264 5.9 MediumMay 23, 2024
• thales sentinel hasp ldk, thalesgroup safenet sentinel hasp, safenet sentinel ldk +2 more Privilege Escalation in Thales SafeNet Sentinel HASP LDK CVE-2024-0197 Public exploit 7.8 HighFebruary 27, 2024
• thales safenet authentication client Privilege Escalation in SafeNet Authentication Client CVE-2023-7016 Public exploit 7.8 HighFebruary 27, 2024
• thales safenet authentication client Privilege Escalation in SafeNet Authentication Client Installer CVE-2023-5993 7.8 HighFebruary 27, 2024
• thalesgroup safenet authentication service, thales safenet authtentication service agent +1 more Improper securing of log directory may allow a denial of service CVE-2023-2737 5.7 MediumAugust 16, 2023
• thalesgroup citadel, thales citadel macosx desktop client, citadel web client +1 more +3 more XSS vulnerability in Citadel CVE-2022-1293 5.7 MediumAugust 2, 2022
• thales safenet authentication service, thalesgroup safenet authentication service remote desktop gateway +1 more Safenet Authentication Service Remote Desktop Gateway prior to 2.0.3 may allow privilege escilation to authenticated users CVE-2021-42810 7.8 HighJanuary 19, 2022
• thales sentinel protection installer The Sentinel Protection Installer 7.7.0 creates files and directory with all privileges granting any user full permissions. CVE-2021-42808 6.5 MediumDecember 20, 2021
• thales safenet authentication service, thalesgroup safenet windows logon agent +1 more A user of a machine protected by SafeNet Agent for Windows Logon may leverage weak entropy to... CVE-2021-42138 7.2 HighDecember 20, 2021
• thales sentinel protection installer The Sentinel Protection Installer 7.7.0 does not properly restrict loading Dynamic Link Library CVE-2021-42809 6.5 MediumDecember 20, 2021
• thales sentinel ldk run-time environment The Sentinel LDK Run-Time Environment installer (Versions 7.6 and prior) adds a firewall rule... CVE-2021-32928 9.8 CriticalJune 16, 2021