---
id: CVE-2026-0872
title: >-
  Improper Certificate Validation vulnerability in Thales SafeNet Agent for
  Windows Logon on Windows allows Signature Spoofing by Improper Validation.


  This issue affects SafeNet Agent for Windows Logon: 4.0.0, 4.1.1, 4.1.2.
summary: >-
  Improper Certificate Validation vulnerability in Thales SafeNet Agent for
  Windows Logon on Windows allows Signature Spoofing by Improper Validation.


  This issue affects SafeNet Agent for Windows Logon: 4.0.0, 4.1.1, 4.1.2.
severity: none
cwe:
  - CWE-295
published: '2026-02-13'
updated: '2026-09-03'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-0872'
references:
  - url: >-
      https://supportportal.thalesgroup.com/csm?sys_kb_id=247fd4a42b4a7290061af3f5f291bff1&id=kb_article_view&sysparm_rank=1&sysparm_tsqueryId=5ecb72c73b927610381ecfaf55e45a0b&sysparm_article=KB0030173
    label: psirt@thalesgroup.com
  - url: >-
      https://thalesdocs.com/sta/agents/wla-windows_logon/wla-preinstallation_passwordless/index.html
    label: psirt@thalesgroup.com
tags:
  - nvd
epss: 0.0019
epssPercentile: 0.08957
ingestedAt: '2026-09-03T17:06:00.676Z'
---

## Overview

Improper Certificate Validation vulnerability in Thales SafeNet Agent for Windows Logon on Windows allows Signature Spoofing by Improper Validation.

This issue affects SafeNet Agent for Windows Logon: 4.0.0, 4.1.1, 4.1.2.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.