Vendor

    Thales

    24 known vulnerabilities in products by Thales, 0 of them actively exploited (CISA KEV).

    Key figures

    24

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Thales
    CriticalCVE-2026-78403

    Unauthenticated Stack Buffer Overflow in Sentinel Keys Server

    		9.8
    CriticalCVE-2021-32928

    Sentinel LDK Run-Time Environment: Incomplete Cleanup

    		9.8
    MediumCVE-2021-28979

    Thalesgroup Safenet Keysecure: security vulnerability

    		6.5
    HighCVE-2026-78402

    Stack Buffer Overflow in Sentinel Keys Server

    		7.8
    HighCVE-2026-94395

    Stack-based buffer overflow in SafeNet Authentication Client SIS token engine

    		6.8
    MediumCVE-2021-42056

    Thalesgroup Safenet Authentication Client: security vulnerability

    		6.7
    HighCVE-2026-112109

    Local privilege escalation in SafeNet Authentication Client SACSrv

    		7.0
    MediumCVE-2026-112110

    Privileged file deletion in SafeNet Authentication Client SACSrv

    		6.3
    MediumCVE-2020-15858

    Thalesgroup Bgs5 Firmware: Path Traversal

    		6.2
    HighCVE-2026-6805

    Vulnerability on Cryptobox external sharing feature

    also in 1 other product

    		7.5
    HighCVE-2021-42138

    Thales CPL Safenet Authentication Service: security vulnerability

    		7.2
    HighCVE-2024-0197

    Privilege Escalation in Thales SafeNet Sentinel HASP LDK

    also in 1 other product

    		7.8
    HighCVE-2026-3457

    Stored XSS vulnerability in Sentinel ACC

    		6.8
    HighCVE-2023-7016

    Privilege Escalation in SafeNet Authentication Client

    also in 1 other product

    		7.8
    HighCVE-2021-42810

    Thales SafeNet Authentication Service: Same Seed in Pseudo-Random Number Generator (PRNG)

    also in 1 other product

    		7.8
    MediumCVE-2022-1293

    XSS vulnerability in Citadel

    also in 1 other product

    		5.7
    HighCVE-2023-5993

    Privilege Escalation in SafeNet Authentication Client Installer

    also in 1 other product

    		7.8
    MediumCVE-2024-5264

    Network Key Transfer with AES KHT vulnerability in Luna EFT

    also in 1 other product

    		5.9
    HighCVE-2021-42809

    The Sentinel Protection Installer 7.7.0 does not properly restrict loading Dynamic Link Library

    also in 1 other product

    		6.5
    MediumCVE-2019-15809

    Microchip Technology Atmel Toolbox: security vulnerability

    also in 1 other product

    		4.7
    MediumCVE-2021-42811

    Vulnerability in SafeNet KeySecure

    		3.3
    MediumCVE-2021-42808

    Thales Sentinel Protection Installer: Improper Access Control

    also in 1 other product

    		6.5
    MediumCVE-2023-2737

    Improper securing of log directory may allow a denial of service

    also in 1 other product

    		5.7
    LowCVE-2026-0872

    Improper Certificate Validation vulnerability in Thales SafeNet Agent for Windows Logon

    		—

    Products

    Products by Thales
    Thales SafeNet Authentication Client30