PatchTheCVEsecret server vulnerabilities and fixes
Recent CVEs affecting secret server, with upgrade or downgrade steps. 3 tracked.
Also searched as: secretserver.
secret server has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-01-27. Highest priority: CVE-2024-12908 (score 43/100).
- CVE-2025-6943 LOW 3.8 UPGRADE Secret Server version 11.7 and earlier is vulnerable to a SQL report creation vulnerability that allows an adm
- CVE-2025-12810 MEDIUM 6.5 DOWNGRADE Improper Authentication vulnerability in Delinea Inc
- CVE-2024-12908 MEDIUM 6.9 UPGRADE Delinea addressed a reported case on Secret Server v11.7.31 (protocol handler version 6.0.3.26) where, within
FAQ
How do I fix secret server vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is secret server being exploited right now?
None of the tracked secret server CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which secret server CVE should I patch first?
CVE-2024-12908 currently ranks highest (43/100): Delinea addressed a reported case on Secret Server v11.7.31 (protocol handler version 6.0.3.26) where, within .