Thales
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| SafeNet Authentication Client | 2 | – | Feb 27, 2024 |
| Sentinel Protection Installer | 2 | – | Dec 20, 2021 |
| Citadel Windows Desktop Client | 1 | – | Aug 2, 2022 |
| Luna EFT | 1 | – | May 23, 2024 |
| Citadel Macosx Desktop Client | 1 | – | Aug 2, 2022 |
| SafeNet Authtentication Service Agent | 1 | – | Aug 16, 2023 |
| SConnect | 1 | – | Oct 1, 2026 |
| Sentinel HASP LDK | 1 | – | Feb 27, 2024 |
| SafeNet Authentication Service | 1 | – | Jan 19, 2022 |
| Citadel Web Client | 1 | – | Aug 2, 2022 |
Exploited and recent CVEs
- CVE-2026-18397 SConnect: Native Host Unauthenticated Remote Code Execution Vulnerability 0.3%
- CVE-2024-5264 Network Key Transfer with AES KHT vulnerability in Luna EFT 0.4%
- CVE-2024-0197 Privilege Escalation in Thales SafeNet Sentinel HASP LDK 0.4%
- CVE-2023-7016 Privilege Escalation in SafeNet Authentication Client 0.3%
- CVE-2023-5993 Privilege Escalation in SafeNet Authentication Client Installer 0.2%
- CVE-2023-2737 Improper securing of log directory may allow a denial of service 0.1%
- CVE-2022-1293 XSS vulnerability in Citadel 0.5%
- CVE-2022-1293 XSS vulnerability in Citadel 0.5%
- CVE-2022-1293 XSS vulnerability in Citadel 0.5%
- CVE-2021-42810 Safenet Authentication Service Remote Desktop Gateway prior to 2.0.3 may allow privilege escilation to authenticated users 0.3%
- CVE-2021-42808 The Sentinel Protection Installer 7.7.0 creates files and directory with all privileges granting any user full permissions. 0.2%
- CVE-2021-42809 The Sentinel Protection Installer 7.7.0 does not properly restrict loading Dynamic Link Library 0.3%