Thalesgroup has 6 CVEs on record between 2021 and 2026. 5 were published in the last 90 days. The busiest recent month was November 2026 with 3. The median CVSS is 7.2 (high), with 1 rated critical. None have a confirmed exploitation report. The most common weakness class is CWE-121 (3). Most affected products: Safenet Authentication Client Service (2), Sentinel Keys Server (2), Safenet Authentication Client SIS token engine (1).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.2
- Publish → KEV
- —
- Last 90 days
- 5 prev 0
Weakness classes
Products
- Safenet Authentication Client Service 2
- Sentinel Keys Server 2
- Safenet Authentication Client SIS token engine 1
- safenet_keysecure 1
Worst active — by depth score
CVE-2026-78403Critical· 9.8Unauthenticated Stack Buffer Overflow in Sentinel Keys Server54CVE-2026-78402High· 7.8Stack Buffer Overflow in Sentinel Keys Server43CVE-2026-112109High· 7.3Local privilege escalation in SafeNet Authentication Client SACSrv40CVE-2026-94395High· 7.0Stack-based buffer overflow in SafeNet Authentication Client SIS token engine39CVE-2021-28979Medium· 6.5SafeNet KeySecure Management Console 8.12.0 is vulnerable to HTTP response splitting attacks36
Thalesgroup vulnerabilities
CVEs affecting Thalesgroup, newest first. Open any entry for full detail, references, and exploit status.
6 CVEsRSS
CVE-2026-112110Medium· 5.8Privileged file deletion in SafeNet Authentication Client SACSrv
A time-of-check to time-of-use race condition in the SafeNet Authentication Client (SAC) SACSrv log-cleanup function can allow an authenticated, non-administrator local user to redirect a privileged file deletion operation outside the in…
CVE-2026-112109High· 7.3Local privilege escalation in SafeNet Authentication Client SACSrv
A local privilege escalation vulnerability in Thales SafeNet Authentication Client (SAC) SACSrv can allow an authenticated, non-administrator local user to trigger a heap-based buffer overflow through the service interface. Successful ex…
CVE-2026-94395High· 7.0Stack-based buffer overflow in SafeNet Authentication Client SIS token engine
A stack-based buffer overflow in Thales SafeNet Authentication Client (SAC) SIS token engine processing can be triggered by a malicious physical or software-emulated smart card. The issue can occur before authentication or PIN entry and …
CVE-2026-78403Critical· 9.8Unauthenticated Stack Buffer Overflow in Sentinel Keys Server
Stack-based buffer overflow and missing authorization vulnerability in Thales Sentinel Keys Server on Windows allows Overflow Buffers. Sentinel Keys Server does not check the length of the first field in the HTTP request. An attacker may…
CVE-2026-78402High· 7.8Stack Buffer Overflow in Sentinel Keys Server
Stack-based buffer overflow and out-of-bounds write vulnerability in Thales Sentinel Keys Server on Windows allows Overflow Buffers. Sentinel Keys Server does not check the length of the first field in the input message. A local atta…
CVE-2021-28979Medium· 6.5SafeNet KeySecure Management Console 8.12.0 is vulnerable to HTTP response splitting attacks
SafeNet KeySecure Management Console 8.12.0 is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is …