https://vulnogram.org/ Most recent CVEs assigned by Delinea, Inc. (delinea). https://vulnogram.org/seaview/icons/delinea.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-15640 https://vulnogram.org/CVE-2026-15640 Under certain conditions a valid SAML IdP response may be used to impersonate another Secret Server user. Critical Network Exploitable Tue, 15 Sep 2026 23:22:15 GMT https://vulnogram.org/CVE-2026-15639 https://vulnogram.org/CVE-2026-15639 An attacker can craft a malicious link that, if used by a legitimate user, may cause the user's browser to run JavaScript supplied by the attacker. Critical Network Exploitable Tue, 15 Sep 2026 23:21:38 GMT https://vulnogram.org/CVE-2026-15638 https://vulnogram.org/CVE-2026-15638 An unauthenticated user with access to Secret Server could leverage a padding oracle to decrypt or encrypt data using one of the server's cryptographic keys. The key itself is not exposed. Critical Network Exploitable Tue, 15 Sep 2026 23:20:56 GMT https://vulnogram.org/CVE-2026-19117 https://vulnogram.org/CVE-2026-19117 Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target account and then authenticate as that user. This issue affects on-premises deployments only. Critical Network Exploitable Wed, 02 Sep 2026 18:04:50 GMT https://vulnogram.org/CVE-2026-2409 https://vulnogram.org/CVE-2026-2409 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Delinea Cloud Suite allows Argument Injection.This issue affects Cloud Suite: before 25.2 HF1. Critical Thu, 19 Feb 2026 17:55:00 GMT https://vulnogram.org/CVE-2025-12812 https://vulnogram.org/CVE-2025-12812 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Delinea Inc. Cloud Suite and Privileged Access Service. Remediation: This issue is fixed in Cloud Suite: 25.1 Medium Wed, 18 Feb 2026 22:10:35 GMT https://vulnogram.org/CVE-2025-12811 https://vulnogram.org/CVE-2025-12811 Improper Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in Delinea Inc. Cloud Suite and Privileged Access Service. If you're not using the latest Server Suite agents, this fix requires that you upgrade to Server Suite 2023.1… Medium Network Exploitable Wed, 18 Feb 2026 22:08:25 GMT https://vulnogram.org/CVE-2025-12810 https://vulnogram.org/CVE-2025-12810 Improper Authentication vulnerability in Delinea Inc. Secret Server On-Prem (RPC Password Rotation modules).This issue affects Secret Server On-Prem: 11.8.1, 11.9.6, 11.9.25. A secret with "change password on check in" enabled automatically checks in… Medium Tue, 27 Jan 2026 19:46:04 GMT https://vulnogram.org/CVE-2025-6942 https://vulnogram.org/CVE-2025-6942 The distributed engine versions 8.4.39.0 and earlier of Secret Server versions 11.7.49 and earlier can be exploited during an initial authorization event that would allow an attacker to impersonate another distributed engine. Low Wed, 02 Jul 2025 15:49:16 GMT https://vulnogram.org/CVE-2025-6943 https://vulnogram.org/CVE-2025-6943 Secret Server version 11.7 and earlier is vulnerable to a SQL report creation vulnerability that allows an administrator to gain access to restricted tables. Low Wed, 02 Jul 2025 15:45:01 GMT https://vulnogram.org/CVE-2024-12908 https://vulnogram.org/CVE-2024-12908 Delinea addressed a reported case on Secret Server v11.7.31 (protocol handler version 6.0.3.26) where, within the protocol handler function, URI's were compared before normalization and canonicalization, potentially leading to over matching against t… Medium Network Exploitable Thu, 26 Dec 2024 15:45:39 GMT