CVE-2026-0872CWE-295

CVE-2026-0872

published February 13, 2026

CVSS
2.5
EPSS
0%
Percentile
9.9
In the wild
Unconfirmed
What it is

Improper Certificate Validation vulnerability in Thales SafeNet Agent for Windows Logon on Windows allows Signature Spoofing by Improper Validation.

This issue affects SafeNet Agent for Windows Logon: 4.0.0, 4.1.1, 4.1.2.

The record
Technical detail
CVSS
2.5 · NONE
CVSS v4.0
Not supplied
EPSS
0.00204 · 9.9th percentile
Weakness
CWE-295 · Improper Certificate Validation
Published
2026-02-13T14:16Z
References (2)
https://supportportal.thalesgroup.com/csm?sys_kb_id=247fd4a42b4a7290061af3f5f291bff1&id=kb_article_view&sysparm_rank=1&sysparm_tsqueryId=5ecb72c73b927610381ecfaf55e45a0b&sysparm_article=KB0030173 · [email protected]https://thalesdocs.com/sta/agents/wla-windows_logon/wla-preinstallation_passwordless/index.html · [email protected]
EPSS history
Timeline
  • 13 FEB 08:53Z
    Improper Certificate Validation vulnerability in Thales SafeNet Agent for Windows Logon
    cvelistv5