CVEs published by Delinea

CVEs published by Delinea (CVE Numbering Authority). 4 tracked.

• CVE-2026-15640 CRITICAL 9.5 Under certain conditions a valid SAML IdP response may be used to impersonate another Secret Server user.
• CVE-2026-15639 CRITICAL 9.3 An attacker can craft a malicious link that, if used by a legitimate user, may cause the user's browser to run
• CVE-2026-15638 CRITICAL 9.1 An unauthenticated user with access to Secret Server could leverage a padding oracle to decrypt or encrypt dat
• CVE-2026-19117 CRITICAL 9.8 Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target a

← Back to latest CVEs