Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

4 matching records.

1. 31
   CVE NVD 36h ago

   In Secret Server versions earlier than 12.3.1, a user under certain conditions could submit an unsigned JWT and receive cloudadmin permissions in…

   In Secret Server versions earlier than 12.3.1, a user under certain conditions could submit an unsigned JWT and receive cloudadmin permissions in response.

   CVSS 8.7 CVE-2026-115830 Delinea Identity
2. 31
   CVE NVD 36h ago

   In Secret Server versions earlier than 12.3.1, a user could bypass the initial login step and authenticate by successfully negotiating the second…

   In Secret Server versions earlier than 12.3.1, a user could bypass the initial login step and authenticate by successfully negotiating the second factor login step only.

   CVSS 8.7 CVE-2026-115829 Delinea Identity
3. 21
   CVE NVD 36h ago

   In Secret Server versions earlier than 12.3.1, Secret Server did not always validate the PIN or biometric check when using a FIDO2-compliant device

   In Secret Server versions earlier than 12.3.1, Secret Server did not always validate the PIN or biometric check when using a FIDO2-compliant device

   CVSS 5.1 CVE-2026-115828 Delinea Identity
4. 16
   CVE NVD 2d ago

   Under certain conditions, privilege manager agent allows a remote unauthenticated attacker to execute arbitrary code as LocalSystem.

   Under certain conditions, privilege manager agent allows a remote unauthenticated attacker to execute arbitrary code as LocalSystem.

   CVSS 8.7 CVE-2026-92744 Delinea

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Delinea&limit=100. RSS for this section: feed.xml.