XSS in Delinea Secret Server (On-Prem)

CVE-2026-15639

An attacker can craft a malicious link that, if used by a legitimate user, may cause the user's browser to run JavaScript supplied by the attacker.

Vulnerability class: XSS (Cross-Site Scripting)