Improper Certificate Validation in Thales SafeNet Agent for Windows Logon
CVE-2026-0872

2.5LOW

Key Information:

Vendor

Thalesgroup

Status
Safenet Agent For Windows Logon
Vendor
CVE Published:
13 February 2026

What is CVE-2026-0872?

An improper certificate validation vulnerability exists in Thales SafeNet Agent for Windows Logon, enabling potential signature spoofing. This issue affects several versions of SafeNet Agent, compromising the integrity of security protocols by failing to properly validate certificates. Organizations utilizing these affected versions are recommended to review their configurations and apply the latest updates to mitigate potential security risks. For detailed guidance on securing your installation, refer to Thales' mitigation resources.

Affected Version(s)

SafeNet Agent for Windows Logon Windows 4.0.0

SafeNet Agent for Windows Logon Windows 4.1.1

SafeNet Agent for Windows Logon Windows 4.1.2

References

https://thalesdocs.com/sta/agents/wla-windows_logon/wla-p...
mitigation
https://supportportal.thalesgroup.com/csm?sys_kb_id=247fd...
vendor-advisory

CVSS V4

Score:
2.5
Severity:
LOW
Confidentiality:
Low
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Huy Kha, Director of Security Research, and the team at Netwrix
.