Thales - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/vendors/thales/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioFri, 30 Oct 2026 23:04:51 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgThales Sentinel Keys Server Remote Code Execution (CVE-2026-78403)https://feed.craftedsignal.io/briefs/2026-10-sentinel-keys-rce/Fri, 30 Oct 2026 23:04:51 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-sentinel-keys-rce/An unauthenticated stack-based buffer overflow in Thales Sentinel Keys Server allows remote attackers to achieve code execution with SYSTEM privileges by sending a maliciously crafted HTTP request.Thales Sentinel Keys Server is affected by a stack-based buffer overflow vulnerability (CVE-2026-78403) due to improper length validation of the first field in incoming HTTP requests. An unauthenticated attacker can exploit this via the network to execute arbitrary code as NT AUTHORITY\SYSTEM. This vulnerability affects Sentinel Keys Server versions prior to 1.3.8.0.

Impact

Successful exploitation grants an attacker full remote code execution on the underlying Windows system with SYSTEM-level privileges.

Recommendation

  • Update Thales Sentinel Keys Server to version 1.3.8.0 or later immediately.
  • Until patching, restrict network access to the Sentinel Keys Server service to authorized administrative IP addresses only.
  • Review web server access logs for anomalous, high-length HTTP request headers or unusually long request lines directed at the service.
]]>criticaladvisory