Skip to content
Threat Feed
Subscribe

Vendor

Thales Group

1 brief RSS
critical advisory

Critical RCE Vulnerability in Thales SConnect Middleware

A critical buffer overflow vulnerability (CVE-2026-18397) in the Thales SConnect browser extension allows unauthenticated attackers to achieve remote code execution through malicious drive-by web pages.

SConnect vulnerability remote-code-execution banking authentication
2t 1c 1i