{"affected":[{"defaultStatus":"unaffected","platforms":["Windows"],"product":"Safenet Authentication Client Service","source":"CNA: THA-PSIRT","vendor":"Thalesgroup","versions":[{"lessThanOrEqual":"10.9.7449","status":"affected","version":"0","versionType":"custom"}]}],"cveId":"CVE-2026-112110","cwes":["CWE-59","CWE-367"],"description":"A time-of-check to time-of-use race condition in the SafeNet Authentication Client (SAC) SACSrv log-cleanup function can allow an authenticated, non-administrator local user to redirect a privileged file deletion operation outside the intended log\ndirectory. \n\n\n\nThis issue affects SAC releases up to and including 10.9 R3 GA (build 10.9.7449).","epss":null,"exploits":[],"kev":null,"metrics":[{"score":5.8,"severity":"medium","source":"CNA: THA-PSIRT","vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0"}],"modifiedAt":1793900025540,"publishedAt":1793900025540,"references":[{"source":"CNA: THA-PSIRT","tags":["vendor-advisory"],"url":"https://supportportal.thalesgroup.com/csm?id=kb_article_view&sys_kb_id=ab05ca862b505350cdc1f87df291bfce&sysparm_article=KB0031249"}],"remediation":[{"kind":"fix","source":"CNA: THA-PSIRT","text":"Upgrade to SafeNet Authentication Client 10.9 R3 Post GA (build 10.9.7954) or later."}],"revision":"31e161d59ccca07a8139743c56879f65d6bb932fa80c8bf850ac19573def2e77","sources":[{"modifiedAt":1793900025540,"name":"CNA: THA-PSIRT","retrievedAt":1793902154624,"url":"https://www.cve.org/CVERecord?id=CVE-2026-112110"}],"ssvc":null,"status":"published","title":"Privileged file deletion in SafeNet Authentication Client SACSrv","updatedAt":1793902154624}