CVE-2026-3457

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Thales Sentinel LDK Runtime on Windows allows Stored XSS. This issue affects Sentinel LDK Runtime: before 10.22.

Score

CVSS 4.0 7.0 High

Status

Awaiting Analysis - psirt@thalesgroup.com

Published

2026-03-27

Last modified

2026-10-26

Weaknesses

CWE-79

Affected products

• Sentinel Ldk Runtime (Thalesgroup)

References

• https://supportportal.thalesgroup.com/csm?id=kb_article_view&sys_kb_id=5c18186b478aa950128dca72e36d4391&sysparm_article…