CVE-2026-78403criticalCWE-121CWE-862

CVE-2026-78403: critical vulnerability in Thalesgroup Sentinel Keys Server

Unauthenticated Stack Buffer Overflow in Sentinel Keys Server

Published

Follow this CVE+ Monitor Sentinel Keys Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.3epss 0.6%
Stack-based buffer overflow and missing authorization vulnerability in Thales Sentinel Keys Server on Windows allows Overflow Buffers. Sentinel Keys Server does not check the length of the first field in the HTTP request. An attacker may craft an HTTP request and send it to Sentinel Keys Server. It may lead to remote code execution as NT AUTHORITY\SYSTEM. This issue affects Sentinel Keys Server: versions lower than 1.3.8.0.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Thalesgroup · Sentinel Keys Server
Related CVEs — Thalesgroup Sentinel Keys Server

In the same product, most dangerous first.

CVE-2026-78402HIGHStack Buffer Overflow in Sentinel Keys ServerEPSS 0.1%