Stack-based Buffer Overflow in Thales Sentinel Keys Server on Windows
CVE-2026-78402

7.3HIGH

Key Information:

Vendor

Thalesgroup

Status
Sentinel Keys Server
Vendor
CVE Published:
30 October 2026

What is CVE-2026-78402?

The Thales Sentinel Keys Server on Windows is vulnerable to a stack-based buffer overflow, which arises from improper length checks on input messages. This vulnerability allows local attackers to craft malicious input, which upon being sent to the Sentinel Keys Server, could result in the execution of arbitrary code. Exploiting this weakness may enable an attacker to escalate privileges to the NT AUTHORITY\SYSTEM level, thereby gaining heightened access within the system. It is crucial for users running versions earlier than 1.3.8.0 to implement the necessary security updates to safeguard their systems against potential exploits.

Affected Version(s)

Sentinel Keys Server Windows 0 < 1.3.8.0

References

https://supportportal.thalesgroup.com/csm?id=kb_article_v...
vendor-advisory

CVSS V4

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Matt Hetelson (matthew.hetelson@revolutional.com)
.