CVE-2026-3457 — Stored XSS vulnerability in Sentinel ACC

CVE-2026-3457

Stored XSS vulnerability in Sentinel ACC PUBLISHED

Description (CNA)

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Thales Sentinel LDK Runtime on Windows allows Stored XSS. This issue affects Sentinel LDK Runtime: before 10.22.

Affected (CNA)

Vendor / product	Versions
Thalesgroup / Sentinel LDK Runtime	affected 0 before 10.22

CWE

CWE-79

References

https://supportportal.thalesgroup.com/csm?id=kb_article_view&sys_kb_id=5c18186b478aa950128dca72e36d4391&sysparm_article=KB0027106

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.