High VA-26-097-01 1 CVE

Thales Sentinel LDK Runtime Stored XSS

Published Apr 7, 2026 · Updated Apr 7, 2026

Vendor: Thales Product: Sentinel LDK Runtime

Summary

Thales Sentinel LDK Runtime on Windows allows Stored Cross-site Scripting.

Vulnerabilities 1

Medium 6.8

CVE-2026-3457

Stored XSS vulnerability in Sentinel ACC

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Thales Sentinel LDK Runtime on Windows allows Stored XSS. This issue affects Sentinel LDK Runtime: before 10.22.

Thalesgroup Sentinel LDK Runtime

Mar 27, 2026

Revision history

2026-04-07 #1.0.0
Initial publication