69 matches found
CVE-2026-112109
A flaw was found in SafeNet Authentication Client SAC. An authenticated local user can trigger a heap-based buffer overflow through the SACSrv service interface. Successful exploitation may allow arbitrary code execution with elevated Local System privileges, resulting in local privilege...
CVE-2026-112110
A time-of-check to time-of-use race condition in the SafeNet Authentication Client SAC SACSrv log-cleanup function can allow an authenticated, non-administrator local user to redirect a privileged file deletion operation outside the intended log directory. This issue affects SAC releases up to an...
CVE-2026-112109
A local privilege escalation vulnerability in Thales SafeNet Authentication Client SAC SACSrv can allow an authenticated, non-administrator local user to trigger a heap-based buffer overflow through the service interface. Successful exploitation may allow arbitrary code execution with Local Syste...
CVE-2026-94395 Stack-based buffer overflow in SafeNet Authentication Client SIS token engine
A stack-based buffer overflow in Thales SafeNet Authentication Client SAC SIS token engine processing can be triggered by a malicious physical or software-emulated smart card. The issue can occur before authentication or PIN entry and may cause a denial of service or potentially arbitrary code...
EUVD-2026-117636
A stack-based buffer overflow in Thales SafeNet Authentication Client SAC SIS token engine processing can be triggered by a malicious physical or software-emulated smart card. The issue can occur before authentication or PIN entry and may cause a denial of service or potentially arbitrary code...
CVE-2026-94395
A stack-based buffer overflow exists in the Thales SafeNet Authentication Client (SAC) SIS token engine. The vulnerability can be triggered by a malicious physical or software-emulated smart card during processing, occurring even before authentication or PIN entry. Impact includes a denial of ser...
EUVD-2026-117621
A time-of-check to time-of-use race condition in the SafeNet Authentication Client SAC SACSrv log-cleanup function can allow an authenticated, non-administrator local user to redirect a privileged file deletion operation outside the intended log directory. This issue affects SAC releases up to an...
CVE-2026-112110 Privileged file deletion in SafeNet Authentication Client SACSrv
A time-of-check to time-of-use race condition in the SafeNet Authentication Client SAC SACSrv log-cleanup function can allow an authenticated, non-administrator local user to redirect a privileged file deletion operation outside the intended log directory. This issue affects SAC releases up to an...
CVE-2026-112110
The SafeNet Authentication Client (SAC) is vulnerable to a time-of-check to time-of-use (TOCTOU) race condition within the SACSrv log-cleanup function . This flaw allows an authenticated, non-administrator local user to redirect a privileged file deletion operation outside of the intended log dir...
CVE-2026-112109
Thales SafeNet Authentication Client (SAC) contains a local privilege escalation vulnerability in the SACSrv component. An authenticated, non-administrator local user can trigger a heap-based buffer overflow via the service interface, potentially leading to arbitrary code execution with Local Sys...
EUVD-2026-117613
A local privilege escalation vulnerability in Thales SafeNet Authentication Client SAC SACSrv can allow an authenticated, non-administrator local user to trigger a heap-based buffer overflow through the service interface. Successful exploitation may allow arbitrary code execution with Local Syste...
CVE-2026-112109 Local privilege escalation in SafeNet Authentication Client SACSrv
A local privilege escalation vulnerability in Thales SafeNet Authentication Client SAC SACSrv can allow an authenticated, non-administrator local user to trigger a heap-based buffer overflow through the service interface. Successful exploitation may allow arbitrary code execution with Local Syste...
Safenet_SAC_CVE-2021-42056
Safenet Authentication Client Privilege Escalation CVE-2021-42056 Based on Thales' website 1, SafeNet Authentication Client – is a middleware client that manages Thales' extensive SafeNet portfolio of certificate-based authenticators, including eTokens, SafeNet IDPrime smart cards, USB and...
Data Hub Adapter Authentication Client Code Execution
The vulnerability of the standard authentication client for Data Hub Adapters in the SAP Commerce Cloud platform is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code, leading to a complete compromise of the system...
CVE-2026-58231
SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially crafted input to certain functions lacking sufficient validation. Successful exploitation could enable arbitrary code execution and compromise internal components, resulting in high...
CVE-2026-58231: Improper Control of Generation of Code
SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially crafted input to certain functions lacking sufficient validation. Successful exploitation could enable arbitrary code execution and compromise internal components, resulting in high...
Security vulnerabilities in the IDExpert Windows Logon Agent
Changing IDExpert Windows Logon Agent is an identity authentication client software developed by Changing, a company based in Taiwan, China. This software is designed to enhance security during Windows login processes. Changing IDExpert Windows Logon Agent contains a security vulnerability that...
Cybiroam Authentication Client security vulnerability
The Cyberoam Authentication Client is a network authentication client developed by the American company Cyberoam. Version 2.1.2.7 of the Cyberoam Authentication Client contains a security vulnerability. This vulnerability stems from a buffer overflow in the Cyberoam Server Address field, which...
CVE-2020-37095: Stack-based Buffer Overflow
Cyberoam Authentication Client 2.1.2.7 contains a buffer overflow vulnerability that allows remote attackers to execute arbitrary code by overwriting Structured Exception Handler SEH memory. Attackers can craft a malicious input in the 'Cyberoam Server Address' field to trigger a bind TCP shell o...