Reported by 1 outlet
CVE-2026-18397 Thales SConnect Drive-By RCE
Why this score
- Breadth
- 0.50 / 2.0 · 1 source
- Authority
- 1.50 / 2.0 · best outlet weight
- Severity
- 4.50 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.00 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Analysis
CVE-2026-18397 (CVSS 9.4) is a critical drive-by remote code execution vulnerability in the Thales SConnect browser extension, used with SWIFT 3SKey hardware MFA and banking middleware. The event reports that a crafted untrusted document or web interaction can trigger arbitrary code execution through the extension. Dark Reading carries the primary report. Banks and organizations relying on SWIFT 3SKey or Thales middleware should treat this as an immediate patching priority and review browser extension exposure.
Timeline
-
original reporting
🤖 CVE-2026-18397 (CVSS 9.4, critical): drive-by RCE in Thales SConnect, the browser extension used with SWIFT 3SKey hardware MFA and several
www.darkreading.com · 10d ago · October 3rd, 2026
🤖 CVE-2026-18397 (CVSS 9.4, critical): drive-by RCE in Thales SConnect, the browser extension used with SWIFT 3SKey hardware MFA and several
via Mastodon https://www.darkreading.com/cybersecurity-operations/swift-banking-govt-middleware-rce