{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/vendors/thales/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:thales:sentinel_keys_server:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.8,"id":"CVE-2026-78403"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Sentinel Keys Server (\u003c 1.3.8.0)"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Thales"],"content_html":"\u003cp\u003eThales Sentinel Keys Server is affected by a stack-based buffer overflow vulnerability (CVE-2026-78403) due to improper length validation of the first field in incoming HTTP requests. An unauthenticated attacker can exploit this via the network to execute arbitrary code as NT AUTHORITY\\SYSTEM. This vulnerability affects Sentinel Keys Server versions prior to 1.3.8.0.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation grants an attacker full remote code execution on the underlying Windows system with SYSTEM-level privileges.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate Thales Sentinel Keys Server to version 1.3.8.0 or later immediately.\u003c/li\u003e\n\u003cli\u003eUntil patching, restrict network access to the Sentinel Keys Server service to authorized administrative IP addresses only.\u003c/li\u003e\n\u003cli\u003eReview web server access logs for anomalous, high-length HTTP request headers or unusually long request lines directed at the service.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-30T23:04:51Z","date_published":"2026-10-30T23:04:51Z","id":"https://feed.craftedsignal.io/briefs/2026-10-sentinel-keys-rce/","summary":"An unauthenticated stack-based buffer overflow in Thales Sentinel Keys Server allows remote attackers to achieve code execution with SYSTEM privileges by sending a maliciously crafted HTTP request.","title":"Thales Sentinel Keys Server Remote Code Execution (CVE-2026-78403)","url":"https://feed.craftedsignal.io/briefs/2026-10-sentinel-keys-rce/"}],"language":"en","title":"CraftedSignal Threat Feed - Thales","version":"https://jsonfeed.org/version/1.1"}