CVE-2026-78403Critical· 9.8▾ MidnightStack-based buffer overflow and missing authorization vulnerability in Thales Sentinel Keys Server on Windows allows Overflow Buffers. Sentinel Keys Server does not check the length of the first field in the HTTP request. An attacker may…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 53.9 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.6%
Stack-based buffer overflow and missing authorization vulnerability in Thales Sentinel Keys Server on Windows allows Overflow Buffers. Sentinel Keys Server does not check the length of the first field in the HTTP request. An attacker may craft an HTTP request and send it to Sentinel Keys Server. It may lead to remote code execution as NT AUTHORITY\SYSTEM.
This issue affects Sentinel Keys Server: versions lower than 1.3.8.0.
sentinel_keys_server < 1.3.8.0Upgrade to latest version.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-78402High· 7.8Stack Buffer Overflow in Sentinel Keys Server
CVE-2026-94395High· 7.0Stack-based buffer overflow in SafeNet Authentication Client SIS token engine
CVE-2026-112110Medium· 5.8Privileged file deletion in SafeNet Authentication Client SACSrv
CVE-2026-112109High· 7.3Local privilege escalation in SafeNet Authentication Client SACSrv
CVE-2024-1151Medium· 5.5Kernel: stack overflow problem in open vswitch kernel module leading to dos
CVE-2023-6693Medium· 4.9Qemu: virtio-net: stack buffer overflow in virtio_net_flush_tx()