Delinea Secret Server (On-Prem)
4 CVEs affecting Delinea Secret Server (On-Prem). Latest disclosed: 2026-09-16. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-19117 | Critical | 9.8 | 2026-09-02 | Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target account and then authenticate as that user. This i… |
CVE-2026-15640 | | 2026-09-16 | Under certain conditions a valid SAML IdP response may be used to impersonate another Secret Server user. | |
CVE-2026-15639 | | 2026-09-16 | An attacker can craft a malicious link that, if used by a legitimate user, may cause the user's browser to run JavaScript supplied by the attacker. | |
CVE-2026-15638 | | 2026-09-16 | An unauthenticated user with access to Secret Server could leverage a padding oracle to decrypt or encrypt data using one of the server's cryptographic keys. T… |