What is CVE-2025-12810?

CVE-2025-12810 is a medium-severity vulnerability in Delinea Secret_server, classified under Improper Authentication. CVSS score: 6.5/10. Published 2026-01-27.

How severe is CVE-2025-12810?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Auth bypass in Delinea Secret_server

CVE-2025-12810

Improper Authentication vulnerability in Delinea Inc. Secret Server On-Prem (RPC Password Rotation modules).This issue affects Secret Server On-Prem: 11.8.1, 11.9.6, 11.9.25. A secret with "change password on check in" enabled automatical…

Vulnerability class: Broken Authentication

EPSS: 0.004 (31.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L.

Affected products

Delinea Secret_server — versions 11.8.000001, 11.9.000006, 11.9.000025
Delinea Inc. Secret Server On-prem — versions 11.8.1, 11.9.6, 11.9.25

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

1443cd92-d354-46d2-9290-d812316ca43a (Release Notes)
1443cd92-d354-46d2-9290-d812316ca43a (Vendor Advisory)
134c704f-9b21-4f2e-91b3-4a467353bcc0 (Product)

Frequently asked questions

What is CVE-2025-12810?: CVE-2025-12810 is a medium-severity vulnerability in Delinea Secret_server, classified under Improper Authentication. CVSS score: 6.5/10. Published 2026-01-27.
How severe is CVE-2025-12810?: Medium severity. CVSS v3 base score is 6.5 out of 10.