Vulnerabilities

Stack-based buffer overflow and missing authorization vulnerability in Thales Sentinel Keys Server on Windows allows Overflow Buffers.

Stack-based buffer overflow and missing authorization vulnerability in Thales Sentinel Keys Server on Windows allows Overflow Buffers. Sentinel Keys Server does not check the length of the first field in the HTTP request. An attacker may craft an HTTP request and send it to Sentinel Keys Server. It may lead to remote code execution as NT AUTHORITY\SYSTEM. This issue affects Sentinel Keys Server: versions lower than 1.3.8.0.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Thalesgroup

Product

Sentinel Keys Server

CVSS v3.1

9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitation

SSVC none, automatable yes, impact total

Weakness

CWE-121, CWE-862

NVD status

Received

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-78403 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 19
   CVE NVD 36h ago

   Stack-based buffer overflow and out-of-bounds write vulnerability in Thales Sentinel Keys Server on Windows allows Overflow Buffers.

   CVSS 7.8 CVE-2026-78402 Thalesgroup