TH
Vendor
Thalesgroup
27
CVEs
0
On KEV
0
New 30D
Products
SA7.8
Safenet Authentication Client
Thalesgroup
3 CVEs0 on KEV0 new
SK6.5
Safenet Keysecure
Thalesgroup
2 CVEs0 on KEV0 new
SP7.8
Sentinel Protection Installer
Thalesgroup
2 CVEs0 on KEV0 new
BF6.4
Bgs5 Firmware
Thalesgroup
1 CVEs0 on KEV0 new
CI6.1
Citadel
Thalesgroup
1 CVEs0 on KEV0 new
EF6.4
Ehs5 Firmware
Thalesgroup
1 CVEs0 on KEV0 new
EF6.4
Ehs6 Firmware
Thalesgroup
1 CVEs0 on KEV0 new
EF6.4
Ehs8 Firmware
Thalesgroup
1 CVEs0 on KEV0 new
EF6.4
Els61 Firmware
Thalesgroup
1 CVEs0 on KEV0 new
EF6.4
Els81 Firmware
Thalesgroup
1 CVEs0 on KEV0 new
EC7.5
Ercom Cryptobox
Thalesgroup
1 CVEs0 on KEV0 new
E44.7
Etoken 4300
Thalesgroup
1 CVEs0 on KEV0 new
LE6.5
Luna Eft
Thalesgroup
1 CVEs0 on KEV0 new
PF6.4
Pds5 Firmware
Thalesgroup
1 CVEs0 on KEV0 new
PF6.4
Pds6 Firmware
Thalesgroup
1 CVEs0 on KEV0 new
PF6.4
Pls62 Firmware
Thalesgroup
1 CVEs0 on KEV0 new
SA2.5
SafeNet Agent for Windows Logon
Thalesgroup
1 CVEs0 on KEV0 new
SA5.5
Safenet Authentication Service
Thalesgroup
1 CVEs0 on KEV0 new
SA7.8
Safenet Authentication Service Remote Desktop Gateway
Thalesgroup
1 CVEs0 on KEV0 new
SW6.5
Safenet Windows Logon Agent
Thalesgroup
1 CVEs0 on KEV0 new
SH7.8
Sentinel Hasp Ldk
Thalesgroup
1 CVEs0 on KEV0 new
SL9.8
Sentinel Ldk Run-time Environment
Thalesgroup
1 CVEs0 on KEV0 new
SL6.8
Sentinel LDK Runtime
Thalesgroup
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-6805 | EC Ercom Cryptobox Thalesgroup | 7.5 | May 7 | Vulnerability on Cryptobox external sharing feature |
| CVE-2026-3457 | SL Sentinel LDK Runtime Thalesgroup | 6.8 | Mar 27 | Stored XSS vulnerability in Sentinel ACC |
| CVE-2026-0872 | SA SafeNet Agent for Windows Logon Thalesgroup | 2.5 | Feb 13 | Improper Certificate Validation vulnerability in Thales SafeNet Agent for Windows Logon |
| CVE-2024-5264 | LE Luna Eft Thalesgroup | 6.5 | May 23 | Network Transfer with AES KHT in Thales Luna EFT 2.1 and above allows a user with administrative console access to access backups taken via offline analysis |
| CVE-2024-0197 | SH Sentinel Hasp Ldk Thalesgroup | 7.8 | Feb 27 | A flaw in the installer for Thales SafeNet Sentinel HASP LDK prior to 9.16 on Windows allows an attacker to escalate their privilege level via local access |
| CVE-2023-7016 | SA Safenet Authentication Client Thalesgroup | 7.8 | Feb 27 | A flaw in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to execute code at a SYSTEM level via local access |
| CVE-2023-5993 | SA Safenet Authentication Client Thalesgroup | 7.8 | Feb 27 | A flaw in the Windows Installer in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to escalate their privilege level via local access |
| CVE-2023-2737 | SA Safenet Authentication Service Thalesgroup | 5.5 | Aug 16 | Improper log permissions in SafeNet Authentication Service Version 3.4.0 on Windows allows an authenticated attacker to cause a denial of service via local privilege escalation |
| CVE-2022-1293 | CI Citadel Thalesgroup | 6.1 | Aug 2 | XSS vulnerability in Citadel |
| CVE-2021-42056 | SA Safenet Authentication Client Thalesgroup | 6.7 | Jun 24 | Thales Safenet Authentication Client (SAC) for Linux and Windows through 10.7.7 creates insecure temporary hid and lock files allowing a local attacker, through a symlink attack,… |
| CVE-2021-42811 | SK Safenet Keysecure Thalesgroup | 6.5 | Jun 10 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in SafeNet KeySecure allows an authenticated user to read arbitrary files from the… |
| CVE-2021-42810 | SA Safenet Authentication Service Remote Desktop Gateway Thalesgroup | 7.8 | Jan 19 | A flaw in the previous versions of the product may allow an authenticated attacker the ability to execute code as a privileged user on a system where the agent is installed |
| CVE-2021-42809 | SP Sentinel Protection Installer Thalesgroup | 7.8 | Dec 20 | Improper Access Control of Dynamically-Managed Code Resources (DLL) in Thales Sentinel Protection Installer could allow the execution of arbitrary code |
| CVE-2021-42808 | SP Sentinel Protection Installer Thalesgroup | 6.7 | Dec 20 | Improper Access Control in Thales Sentinel Protection Installer could allow a local user to escalate privileges |
| CVE-2021-42138 | SW Safenet Windows Logon Agent Thalesgroup | 6.5 | Dec 20 | A user of a machine protected by SafeNet Agent for Windows Logon may leverage weak entropy to access the encrypted credentials of any or all the users on that machine |
| CVE-2021-32928 | SL Sentinel Ldk Run-time Environment Thalesgroup | 9.8 | Jun 16 | The Sentinel LDK Run-Time Environment installer (Versions 7.6 and prior) adds a firewall rule named “Sentinel License Manager” that allows incoming connections from private… |
| CVE-2021-28979 | SK Safenet Keysecure Thalesgroup | 6.5 | Jun 16 | SafeNet KeySecure Management Console 8.12.0 is vulnerable to HTTP response splitting attacks |
| CVE-2020-15858 | BF Bgs5 Firmware Thalesgroup | 6.4 | Aug 21 | Some devices of Thales DIS (formerly Gemalto, formerly Cinterion) allow Directory Traversal by physically proximate attackers |
| CVE-2019-15809 | E4 Etoken 4300 Thalesgroup | 4.7 | Oct 3 | Smart cards from the Athena SCS manufacturer, based on the Atmel Toolbox 00.03.11.05 and the AT90SC chip, contain a timing side channel in ECDSA signature generation |