CVE-2026-115830

Vendor

Delinea

Product

Secret Server

CVSS v4.0

8.7 AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness

CWE-863

Exposure class

Identity

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 31
   CVE NVD 36h ago

   In Secret Server versions earlier than 12.3.1, a user under certain conditions could submit an unsigned JWT and receive cloudadmin permissions in…

   In Secret Server versions earlier than 12.3.1, a user under certain conditions could submit an unsigned JWT and receive cloudadmin permissions in response.

   CVSS 8.7 CVE-2026-115830 Delinea