{"id":"CVE-2026-78403","published":"2026-10-30T20:17:17.843","lastModified":"2026-10-30T20:17:17.843","description":"Stack-based buffer overflow and missing\nauthorization vulnerability in Thales Sentinel Keys Server on Windows allows\nOverflow Buffers. Sentinel Keys Server does not check the length of the first\nfield in the HTTP request. An attacker may craft an HTTP request and send it to\nSentinel Keys Server. It may lead to remote code execution as NT\nAUTHORITY\\SYSTEM.\n\n\n\n\n\nThis issue affects Sentinel Keys Server:\nversions lower than 1.3.8.0.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-121","CWE-862"],"vendors":[],"products":[],"references":[{"url":"https://supportportal.thalesgroup.com/csm?id=kb_article_view&sys_kb_id=50fc9f3b3b005f10bba8b41864e45a61&sysparm_article=KB0031216","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A stack-based buffer overflow in Thales Sentinel Keys Server on Windows occurs when processing HTTP requests due to missing input length validation, allowing unauthenticated remote attackers to overwrite the stack and achieve code execution as SYSTEM; combined with a missing authorization check (CWE-862), this enables full system compromise.","exploitability":"Trivial to exploit over the network without authentication or user interaction, requiring only sending a specially crafted HTTP request with an overly long first field.","blast_radius":"Successful exploitation grants NT AUTHORITY\\SYSTEM privileges, enabling complete host takeover, lateral movement, and data exfiltration across the infrastructure using the vulnerable server.","remediation":"Upgrade Sentinel Keys Server to version 1.3.8.0 or later, as explicitly stated in the description as the fixed release.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","buffer-overflow","auth-bypass","web","windows"],"model":"garnet-coder","analyzedAt":"2026-10-31T08:47:33.348Z"}}