CVE-2026-3457: Stored XSS vulnerability in Sentinel ACC

Stored XSS vulnerability in Sentinel ACC

Status

Published

2026-03-27

Updated

2026-09-03

Assigning organization

THA-PSIRT

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Thales Sentinel LDK Runtime on Windows allows Stored XSS. This issue affects Sentinel LDK Runtime: before 10.22.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Thalesgroup Sentinel LDK Runtime

Default version status: unaffected

0 to < 10.22affected

References

https://supportportal.thalesgroup.com/csm?id=kb_article_view&sys_kb_id=5c18186b478aa950128dca72e36d4391&sysparm_article=KB0027106 ↗