Skip to content
Threat Feed
Subscribe

Product

SConnect (All Versions Prior to August 2026 Update)

1 brief RSS
critical advisory

Critical RCE Vulnerability in Thales SConnect Middleware

A critical buffer overflow vulnerability (CVE-2026-18397) in the Thales SConnect browser extension allows unauthenticated attackers to achieve remote code execution through malicious drive-by web pages.

SConnect vulnerability remote-code-execution banking authentication
2t 1c 1i