Delinea vulnerabilities

CVEs per yearBy the year they were published

1. 20232
2. 20245
3. 20252
4. 20269

Newest CVEs

• CVE-2026-115829

  Secret Server Authentication Bypass via Unauthenticated Pin Code Reset and Brute Force

  Delinea · Secret Server (On-Prem)

  Critical9.9
• CVE-2026-115830

  Secret Server JWT issuance error

  Delinea · Secret Server (On-Prem)

  High8.7
• CVE-2026-115828

  Secret Server device validation error

  Delinea · Secret Server (On-Prem)

  Critical9.4
• CVE-2026-92744

  Delinea Privilege Manager agent unauthenticated remote code execution vulnerability

  Delinea · Privilege Manager

  High8.7
• CVE-2026-15640

  Authentication Bypass via SAML Response Manipulation

  Delinea · Secret Server (On-Prem)

  Critical9.5
• CVE-2026-15639

  Reflected Cross-Site Scripting

  Delinea · Secret Server (On-Prem)

  Critical9.3
• CVE-2026-15638

  Cryptographic Padding Oracle

  Delinea · Secret Server (On-Prem)

  Critical9.1
• CVE-2026-19117

  Delinea Secret Server FIDO2 credential registration authentication bypass vulnerability

  Delinea · Secret Server (On-Prem)

  Critical9.8
• CVE-2026-2409

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Delinea Cloud Suite allows Argument Injection.This issue…

  Delinea · Cloud Suite

  Critical9.3
• CVE-2025-6942

  The distributed engine versions 8.4.39.0 and earlier of Secret Server versions 11.7.49 and earlier can be exploited during an initial authorization event that…

  Delinea · Secret Server

  Low3.8