CVE-2026-115829

Vendor

Delinea

Product

Secret Server

CVSS v4.0

8.7 AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness

CWE-288

Exposure class

Identity

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 31
   CVE NVD 36h ago

   In Secret Server versions earlier than 12.3.1, a user could bypass the initial login step and authenticate by successfully negotiating the second…

   In Secret Server versions earlier than 12.3.1, a user could bypass the initial login step and authenticate by successfully negotiating the second factor login step only.

   CVSS 8.7 CVE-2026-115829 Delinea