Vendor

    Thales

    10 known vulnerabilities in products by Thales, 0 of them actively exploited (CISA KEV).

    Key figures

    10

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Thales
    CriticalCVE-2026-18397

    SConnect: Native Host Unauthenticated Remote Code Execution Vulnerability

    —
    HighCVE-2024-0197

    Privilege Escalation in Thales SafeNet Sentinel HASP LDK

    also in 1 other product

    7.8
    HighCVE-2023-7016

    Privilege Escalation in SafeNet Authentication Client

    also in 1 other product

    7.8
    HighCVE-2021-42810

    Thales SafeNet Authentication Service: Same Seed in Pseudo-Random Number Generator (PRNG)

    also in 1 other product

    7.8
    MediumCVE-2022-1293

    XSS vulnerability in Citadel

    also in 1 other product

    5.7
    HighCVE-2023-5993

    Privilege Escalation in SafeNet Authentication Client Installer

    also in 1 other product

    7.8
    MediumCVE-2024-5264

    Network Key Transfer with AES KHT vulnerability in Luna EFT

    also in 1 other product

    5.9
    HighCVE-2021-42809

    The Sentinel Protection Installer 7.7.0 does not properly restrict loading Dynamic Link Library

    also in 1 other product

    6.5
    MediumCVE-2021-42808

    Thales Sentinel Protection Installer: Improper Access Control

    also in 1 other product

    6.5
    MediumCVE-2023-2737

    Improper securing of log directory may allow a denial of service

    also in 1 other product

    5.7