CVE-2026-78403

{
  "etk_id": "ETK-2026-3108",
  "cve_id": "CVE-2026-78403",
  "display_id": "CVE-2026-78403",
  "ghsa_id": "GHSA-fxcq-q77c-fh3w",
  "euvd_id": "EUVD-2026-114364",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Stack-based buffer overflow in Sentinel Keys Server",
  "summary": "Windows installations of Sentinel Keys Server before version 1.3.8.0 are affected. An unauthenticated remote attacker who can reach the HTTP service may be able to execute code with SYSTEM privileges.",
  "mitigation": "Upgrade Sentinel Keys Server to version 1.3.8.0 or later. Until upgraded, restrict access to its HTTP service to trusted hosts and networks.",
  "vendor": "Thalesgroup",
  "product": "Sentinel Keys Server",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, < 1.3.8.0"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "1.3.8.0"
      ],
      "package_name": "Sentinel Keys Server",
      "purl": null
    }
  ],
  "cwes": [
    121
  ],
  "cvss_score": 9.3,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 17.055755166666668,
  "t0_at": "2026-10-30T19:12:56.080000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-30T19:12:56.080000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-30T19:12:56.080000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-78403"
    }
  }
}