SConnect vulnerabilities

1 known vulnerability in SConnect from Thales. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.4 Critical severity

  SConnect: Improper Handling of Length Parameter Inconsistency

  CVE-2026-18397Oct 1, 2026Thales

  This vulnerability enables unauthenticated remote code execution (RCE) on a victim's machine by exploiting a combination of cryptographic weaknesses and memory management issues in the SConnect native host component. The attack leverages an unrestricted messag