CVE-2026-78403

Name of the Vulnerable Software and Affected Versions Thales Sentinel Keys Server versions prior to 1.3.8.0

Description A stack-based buffer overflow and missing authorization issue exists in the HTTP handler of the software on Windows. The server fails to validate the length of the first field in an HTTP request, allowing an unauthenticated remote attacker to send a specially crafted request. This can lead to remote code execution with NT AUTHORITYSYSTEM privileges.

Recommendations Update to version 1.3.8.0.