Back Rapid7

CVE-2026-18397: Thales SConnect: This vulnerability enables unauthenticated remote ...

Rapid7 • October 2, 2026

This vulnerability enables unauthenticated remote code execution (RCE) on a victim's machine by exploiting a combination of cryptographic weaknesses and memory management issues in the SConnect native host component.

The attack leverages an unrestricted messaging interface between an attacker-controlled web page and the native host, allowing malicious input to bypass security checks.

CVSS 4.0 Base Score: 9.4 (CRITICAL)

CVSS 4.0 Vector: ( CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X )

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerability Found in Thales SConnect Allows Remote Code Execution A critical vulnerability, CVE-2026-18397, has been identified in Thales SConnect, enabling unauthenticated remote code execution (RCE) on affected systems. The flaw arises from cryptographic weaknesses and memory management issues, allowing attackers to exploit an unrestricted messaging interface between a web page and the native host. This vulnerability has a CVSS score of 9.4, indicating a critical severity level. The vulnerability was published on October 1, 2026, and poses a significant risk to users of the SConnect native host component. No patch has been reported as of the latest update. Organizations are urged to assess their exposure and implement mitigations to protect against potential exploitation. The exploit method could lead to severe consequences if not addressed promptly. 2 sources 75

Extracted Entities

CVE-2026-18397: Thales SConnect: This vulnerability enables unauthenticated remote ...

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Vulnerabilities (1)