{"id":"CVE-2026-78403","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-78403","generatedAt":"2026-11-04T11:49:41.829Z","title":"Stack-based buffer overflow and missing authorization vulnerability in Thales Sentinel Keys Server on Windows allows Overflow Buffers.","description":"Stack-based buffer overflow and missing\nauthorization vulnerability in Thales Sentinel Keys Server on Windows allows\nOverflow Buffers. Sentinel Keys Server does not check the length of the first\nfield in the HTTP request. An attacker may craft an HTTP request and send it to\nSentinel Keys Server. It may lead to remote code execution as NT\nAUTHORITY\\SYSTEM.\n\n\n\n\n\nThis issue affects Sentinel Keys Server:\nversions lower than 1.3.8.0.","published":"2026-10-30T20:17:18.000Z","lastModified":"2026-11-02T19:14:53.000Z","status":"Awaiting Analysis","sourceIdentifier":"psirt@thalesgroup.com","cvss":{"version":"4.0","score":9.3,"severity":"CRITICAL","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-121","CWE-862"],"affected":[],"epss":{"score":0.00577,"percentile":0.47591,"date":"2026-11-03","history":[{"date":"2026-10-31","score":0.00577,"percentile":0.47562}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.58%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[{"kind":"new","label":"New CVE","at":"2026-10-30T20:17:18.000Z","detail":{"score":"9.3","severity":"CRITICAL","publishedAt":"2026-10-30T20:17:17.843Z"},"summary":"New CVE, critical severity (CVSS 9.3)."}],"references":[{"url":"https://supportportal.thalesgroup.com/csm?id=kb_article_view&sys_kb_id=50fc9f3b3b005f10bba8b41864e45a61&sysparm_article=KB0031216","source":"psirt@thalesgroup.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-78403","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}