{"id":"EM-20261105-3F22","url":"https://cyber.eventmonitor.net/incident/EM-20261105-3F22/thales-safenet-authentication-client-vulnerability-cve-2026-112109/","type":"cve","title":"Thales SafeNet Authentication Client Vulnerability (CVE-2026-112109)","subtitle":"CVE-2026-112109","subject":"CVE-2026-112109","status":"Developing","severity":"high","affected":[],"headline":null,"born":"2026-11-05T18:17:00.787Z","firstSignal":"2026-11-05T17:20:32.000Z","lastSignal":"2026-11-05T18:17:00.787Z","updated":"2026-11-06T12:16:45.734Z","revision":1,"life":[{"status":"Born","at":"2026-11-05T18:17:00.787Z","why":"second independent source: C6 NVD CVE API 2.0"},{"status":"Developing","at":"2026-11-05T18:17:00.787Z","why":"signals keep joining"}],"changeLog":[{"at":"2026-11-05T17:20:32.000Z","what":"First signal: C41 Red Hat Security Data"},{"at":"2026-11-05T18:17:00.787Z","what":"Born: second source, C6 NVD CVE API 2.0. Page EM-20261105-3F22 created."}],"stages":[{"name":"Disclosed","at":"2026-11-05T18:17:00.787Z","detail":"C6 NVD published"},{"name":"Scored","at":"2026-11-05T18:17:00.787Z","detail":"CVSS 7.3"},{"name":"Exploited","at":null,"detail":"No exploitation reported"},{"name":"Advisories","at":null,"detail":"None yet"},{"name":"Vendor Response","at":"2026-11-05T17:20:32.000Z","detail":"C41 published"},{"name":"Resolved","at":null,"detail":"After 14 quiet days"}],"signals":[{"at":"2026-11-05T17:20:32.000Z","source":"C41","sourceName":"Red Hat Security Data","role":"Vendor","severity":3,"title":"Red Hat: CVE-2026-112109 (important)","text":"SafeNet Authentication Client: SafeNet Authentication Client: Local privilege escalation via heap-based buffer overflow","url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-112109.json"},{"at":"2026-11-05T18:17:00.787Z","source":"C6","sourceName":"NVD CVE API 2.0","role":"Database","severity":3,"title":"CVE-2026-112109 (CVSS 7.3)","text":"A local privilege escalation vulnerability in Thales SafeNet Authentication Client (SAC) SACSrv can allow an authenticated, non-administrator local user to trigger a heap-based buffer overflow through the service interface. Successful exploitation may allow arbitrary code execution with Local System privileges.This issue affects SAC releases up to and including 10.9 R3 GA (build 10.9.7449).","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112109"}],"crowd":[],"reference":{"nvd":{"published":"2026-11-05T18:17:00.787","score":7.3,"severity":"HIGH","desc":"A local privilege escalation vulnerability in Thales SafeNet Authentication Client (SAC) SACSrv can allow an authenticated, non-administrator local user to trigger a heap-based buffer overflow through the service interface. Successful exploitation may allow arbitrary code execution with Local…","product":"","seen":1793922090303},"kev":null,"epss":null,"p0":false},"mergedInto":null,"publisher":"Event Monitor Cyber"}