{"id":"CVE-2026-94395","published":"2026-11-05T19:17:28.617","lastModified":"2026-11-05T19:17:28.617","description":"A stack-based buffer overflow in Thales SafeNet Authentication Client (SAC) SIS token engine processing can be triggered by a malicious physical or software-emulated smart card. The issue can occur before authentication or PIN entry and may\ncause a denial of service or potentially arbitrary code execution with the privileges of the affected process. Affected releases start with SAC 10.8 R7 and include SAC 10.9 R3 GA (build 10.9.7449).","cvssScore":6.8,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-121","CWE-787","CWE-1284"],"vendors":[],"products":[],"references":[{"url":"https://supportportal.thalesgroup.com/csm?id=kb_article_view&sys_kb_id=7786064a2b905350cdc1f87df291bf92&sysparm_article=KB0031250","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}