| CVE-2026-6805 | CAO7.5 | Vulnerability on the external sharing feature in Cryptobox allows an attacker knowing a sharing link URL to retrieve information from the server allowing an offline brute-force attack of the access code associated to this sharing link. | 07/05/2026 |
| CVE-2024-5264 | TRUNG BÌNH6.5 | Network Transfer with AES KHT in Thales Luna EFT 2.1 and above allows a user with administrative console access to access backups taken via offline analysis | 23/05/2024 |
| CVE-2024-0197 | CAO7.8 | A flaw in the installer for Thales SafeNet Sentinel HASP LDK prior to 9.16 on Windows allows an attacker to escalate their privilege level via local access.
| 27/02/2024 |
| CVE-2023-7016 | CAO7.8 | A flaw in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to execute code at a SYSTEM level via local access. | 27/02/2024 |
| CVE-2023-5993 | CAO7.8 | A flaw in the Windows Installer in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to escalate their privilege level via local access. | 27/02/2024 |
| CVE-2023-2737 | TRUNG BÌNH5.5 | Improper log permissions in SafeNet Authentication Service Version 3.4.0 on Windows allows an authenticated attacker to cause a denial of service via local privilege escalation.
| 16/08/2023 |
| CVE-2022-1293 | TRUNG BÌNH6.1 | The embedded neutralization of Script-Related HTML Tag, was by-passed in the case of some extra conditions. | 02/08/2022 |
| CVE-2021-42056 | TRUNG BÌNH6.7 | Thales Safenet Authentication Client (SAC) for Linux and Windows through 10.7.7 creates insecure temporary hid and lock files allowing a local attacker, through a symlink attack, to overwrite arbitrary files, and potentially achieve arbitrary command execution with high privileges. | 24/06/2022 |
| CVE-2021-42811 | TRUNG BÌNH6.5 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in SafeNet KeySecure allows an authenticated user to read arbitrary files from the underlying system on which the product is deployed. | 10/06/2022 |
| CVE-2021-42810 | CAO7.8 | A flaw in the previous versions of the product may allow an authenticated attacker the ability to execute code as a privileged user on a system where the agent is installed. | 19/01/2022 |
| CVE-2021-42809 | CAO7.8 | Improper Access Control of Dynamically-Managed Code Resources (DLL) in Thales Sentinel Protection Installer could allow the execution of arbitrary code. | 20/12/2021 |
| CVE-2021-42808 | TRUNG BÌNH6.7 | Improper Access Control in Thales Sentinel Protection Installer could allow a local user to escalate privileges. | 20/12/2021 |
| CVE-2021-42138 | TRUNG BÌNH6.5 | A user of a machine protected by SafeNet Agent for Windows Logon may leverage weak entropy to access the encrypted credentials of any or all the users on that machine. | 20/12/2021 |
| CVE-2021-32928 | NGHIÊM TRỌNG9.8 | The Sentinel LDK Run-Time Environment installer (Versions 7.6 and prior) adds a firewall rule named “Sentinel License Manager” that allows incoming connections from private networks using TCP Port 1947. While uninstalling, the uninstaller fails to close Port 1947. | 16/06/2021 |
| CVE-2021-28979 | TRUNG BÌNH6.5 | SafeNet KeySecure Management Console 8.12.0 is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked. | 16/06/2021 |