{"id":"CVE-2026-18397","published":"2026-10-01T22:17:01.220","lastModified":"2026-10-02T20:17:02.060","description":"This vulnerability enables unauthenticated remote code execution (RCE) on a victim's machine by exploiting a combination of cryptographic weaknesses and memory management issues in the SConnect native host component.\n\nThe attack leverages an unrestricted messaging interface between an attacker-controlled web page and the native host, allowing malicious input to bypass security checks.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-130","CWE-252","CWE-347","CWE-457"],"vendors":[],"products":[],"references":[{"url":"https://www.thalesgroup.com/en/product-security-incident-response","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}