Vulnerability · Published Nov 5, 2026 · Assigned by THA-PSIRT

CVE-2026-112109Local privilege escalation in SafeNet Authentication Client SACSrv

High 7.0

In plain English

A high-severity heap buffer overflow in Safenet Authentication Client Service from Thalesgroup. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities).

Severity (CVSS 3.1)7.0High

Exploit odds (30 days)0.1%top 97.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A local privilege escalation vulnerability in Thales SafeNet Authentication Client (SAC) SACSrv can allow an authenticated, non-administrator local user to trigger a heap-based buffer overflow through the service interface. Successful exploitation may allow arbitrary code execution with Local System privileges.This issue affects SAC releases up to and including 10.9 R3 GA (build 10.9.7449).

Affected products (as reported)

Vendor	Product	Versions
Thalesgroup	Safenet Authentication Client Service	0 – through 10.9.7449

Weakness: CWE-122, CWE-190 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

References

https://supportportal.thalesgroup.com/csm?id=kb_article_view&sys_kb_id=89d3c2ce2b105350cdc1f87df291bf55&sysparm_article=KB0031248 vendor-advisory