Skip to content
OpenAdvisories
Medium · 6.8 CVE-2026-3457 EUVD-2026-16575

Stored XSS vulnerability in Sentinel ACC

Published Mar 27, 2026 · Updated Sep 3, 2026 · Assigned by THA-PSIRT

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Thales Sentinel LDK Runtime on Windows allows Stored XSS.

This issue affects Sentinel LDK Runtime: before 10.22.

Affected products

VendorProductAffectedFixed
Thalesgroup Sentinel LDK Runtime < 10.22 10.22

Advisories 1

References