Low severity · published Feb 13, 2026
CVE-2026-0872
Improper Certificate Validation vulnerability in Thales SafeNet Agent for Windows Logon
2.5
CVSS
0.2%
EPSS
No
On KEV
Description
Improper Certificate Validation vulnerability in Thales SafeNet Agent for Windows Logon on Windows allows Signature Spoofing by Improper Validation.
This issue affects SafeNet Agent for Windows Logon: 4.0.0, 4.1.1, 4.1.2.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 11% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SA
SafeNet Agent for Windows Logon · Thalesgroup
4.0.0; 4.1.1; 4.1.2 · source: vendor
Affected product
SA
SafeNet Agent for Windows Logon
Thalesgroup
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-0872
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-0872
supportportal.thalesgroup.com
https://supportportal.thalesgroup.com/csm?sys_kb_id=247fd4a42b4a7290061af3f5f291bff1&id=kb_article_view&sysparm_rank=1&sysparm_tsqueryId=5ecb72c73b927610381ecfaf55e45a0b&sysparm_article=KB0030173
thalesdocs.com
https://thalesdocs.com/sta/agents/wla-windows_logon/wla-preinstallation_passwordless/index.html