Dashboard / CVE-2026-112110

CVE-2026-112110

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 27/100
Published: 2026-11-05 Modified: 2026-11-06 First seen: 2026-11-05 Status: active

Attack Surface

No Interaction Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: High
PR: Low
UI: None
S: X
AT: Present
VC: None
VI: High
VA: High

Description

A time-of-check to time-of-use race condition in the SafeNet Authentication Client (SAC) SACSrv log-cleanup function can allow an authenticated, non-administrator local user to redirect a privileged file deletion operation outside the intended log directory.  This issue affects SAC releases up to and including 10.9 R3 GA (build 10.9.7449).

Weakness Classification (2)

Affected Software (2)

VendorProductVersion
Thalesgroup Safenet Authentication Client Service 0
Thalesgroup Safenet Authentication Client Service 0

References & Advisories (1)

Bug Bounty Relevance

27 / 100
✓ No user interaction

CVSS Score

5.8 / 10.0 v4.0
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.10%
Raw Score 0.001050
Percentile 1.1%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00105
2026-11-12
0.00105
2026-11-10
0.00105
2026-11-09
0.00105
2026-11-08
0.00105
2026-11-07
0.00105
2026-11-06
0.00105

Intelligence Sources

mitre ref →
nvd ref →

External Links