Local privilege escalation in SafeNet Authentication Client SACSrv

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

A local privilege escalation vulnerability in Thales SafeNet Authentication Client (SAC) SACSrv can allow an authenticated, non-administrator local user to trigger a heap-based buffer overflow through the service interface. Successful exploitation may allow arbitrary code execution with Local System privileges.This issue affects SAC releases up to and including 10.9 R3 GA (build 10.9.7449).

Üreticinin çözüm notu (İngilizce)

Upgrade to SafeNet Authentication Client 10.9 R3 Post GA (build 10.9.7954) or later.

Etkilenen sürümler1 yazılım

Kaynaklar3 kaynak

• CVE.org kaydı
• NVD kaydı
• supportportal.thalesgroup.com/csm Üretici bülteni

Kayıt geçmişi

1. 5 Kas 2026 20:20Yayımlandı

İlgili açıklar

• 5,8 CVE-2026-112110Privileged file deletion in SafeNet Authentication Client SACSrv
• 8,2 CVE-2026-116788FreeSWITCH: Pre-authentication heap buffer overflow in core XML empty-entity decoding
• 9,1 CVE-2026-116785FreeSWITCH: Pre-authentication heap out-of-bounds write in mod_xml_rpc WebSocket frame length handling
• 7,5 CVE-2026-116787FreeSWITCH: Pre-authentication process termination in the Event Socket via an unbounded Content-Length
• 6,5 CVE-2026-123205accel-ppp before 1.15.0 Heap-based Buffer Overflow via oversized log lines in log_tcp/log_syslog/log_pgsql
• 8,3 CVE-2026-54914WebAssembly Micro Runtime: Heap Buffer Overflow in WAMR WASI poll_oneoff Output Buffer