CVE-2026-18397
SConnect: Native Host Unauthenticated Remote Code Execution Vulnerability
Thales SConnect
CVSS
9.4CriticalExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.34%Chance of exploitation activity in the next 30 days, higher than 25% of CVEs. Scored 23 Oct 2026FIRST EPSS
What fixes it
- 2.16.1.0SConnectCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
This vulnerability enables unauthenticated remote code execution (RCE) on a victim's machine by exploiting a combination of cryptographic weaknesses and memory management issues in the SConnect native host component.
The attack leverages an unrestricted messaging interface between an attacker-controlled web page and the native host, allowing malicious input to bypass security checks.
Text from CVE List
Affected versions 1
- SConnectaffected: all versions before 2.16.1.0CVE List