CVE-2026-0872 LOW

CVE-2026-0872: Improper Certificate Validation vulnerability in Thales SafeNet Agent for Windows Logon

Vendor Thales
Product SafeNet Agent for Windows Logon
Weakness CWE-295
Published February 13, 2026
Last update February 13, 2026

CVSS base score

2.5/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:H/SI:H/SA:L/E:P

What the vulnerability does

01Description

Improper Certificate Validation vulnerability in Thales SafeNet Agent for Windows Logon on Windows allows Signature Spoofing by Improper Validation.This issue affects SafeNet Agent for Windows Logon: 4.0.0, 4.1.1, 4.1.2.

Key dates

02Disclosure timeline

February 13, 2026 CVE published
February 13, 2026 Record updated