Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-112110— Privileged file deletion in SafeNet Authentication Client SACSrv

Quick assessment

Affected
Thalesgroup Safenet Authentication Client Service
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

SafeNet 认证客户端（SAC）的 SACSrv 日志清理函数中存在一个“检查到使用”（TOCTOU）竞态条件漏洞。该漏洞允许已认证但非管理员的本地用户将本应仅限于日志目录内的特权文件删除操作重定向至目录之外。 此问题影响 SafeNet 认证客户端（SAC）10.9 R3 GA（构建版本 10.9.7449）及之前的所有版本。

CVSS 5.8 · Medium

Possible ATT&CK Techniques 1 AI

T1548.001 · Setuid and Setgid

Affected Version Matrix 1

VendorProduct Version RangeStatus
Thalesgroup Safenet Authentication Client Service ≤ 10.9.7449 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-112110

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Privileged file deletion in SafeNet Authentication Client SACSrv
Source: CVE Program / CVE List V5
Vulnerability Description
A time-of-check to time-of-use race condition in the SafeNet Authentication Client (SAC) SACSrv log-cleanup function can allow an authenticated, non-administrator local user to redirect a privileged file deletion operation outside the intended log directory.  This issue affects SAC releases up to and including 10.9 R3 GA (build 10.9.7449).
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
在文件访问前对链接解析不恰当(链接跟随)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Thalesgroup Safenet Authentication Client Service 0 ~ 10.9.7449 -

II. Public POCs for CVE-2026-112110

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-112110

请登录查看更多情报信息。

Other References for CVE-2026-112110 (1)

Same Patch Batch · Thalesgroup · 2026-11-05 · 3 CVEs total

CVE-2026-112109 7.3 HIGH Local privilege escalation in SafeNet Authentication Client SACSrv
CVE-2026-94395 7.0 HIGH Stack-based buffer overflow in SafeNet Authentication Client SIS token engine

IV. Related Vulnerabilities

Same product: Safenet Authentication Client Service
Same vendor: Thalesgroup
Same weakness: CWE-59