Log in Start free

Delinea

Products

ProductCVEsExploitedLatest
Secret Server (On-Prem)7–Oct 30, 2026
Secret Server6–Jul 2, 2025
Centrify PAS2–Jul 2, 2024
Privilege Manager2–Oct 29, 2026
Cloud Suite1–Feb 19, 2026

Exploited and recent CVEs

  • CVE-2026-115829 Critical 9.9 Secret Server Authentication Bypass via Unauthenticated Pin Code Reset and Brute Force 0.5%
  • CVE-2026-115830 High 8.7 Secret Server JWT issuance error 0.3%
  • CVE-2026-115828 Critical 9.4 Secret Server device validation error 0.3%
  • CVE-2026-92744 High 8.7 Delinea Privilege Manager agent unauthenticated remote code execution vulnerability 0.3%
  • CVE-2026-15640 Critical 9.5 Authentication Bypass via SAML Response Manipulation 0.3%
  • CVE-2026-15639 Critical 9.3 Reflected Cross-Site Scripting 0.4%
  • CVE-2026-15638 Critical 9.1 Cryptographic Padding Oracle 0.2%
  • CVE-2026-19117 Critical 9.8 Delinea Secret Server FIDO2 credential registration authentication bypass vulnerability 0.5%
  • CVE-2026-2409 Critical 9.3 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Delinea Cloud Suite allows Argument Injection.This issue affects Cloud Suite: before 25.2 HF1. 0.2%
  • CVE-2025-6942 Low 3.8 The distributed engine versions 8.4.39.0 and earlier of Secret Server versions 11.7.49 and earlier can be exploited during an initial authorization event that would allow an attacker to impersonate an 0.1%
  • CVE-2025-6943 Low 3.8 Secret Server version 11.7 and earlier is vulnerable to a SQL report creation vulnerability that allows an administrator to gain access to restricted tables. 0.2%
  • CVE-2024-12908 Medium 6.9 Delinea addressed a reported case on Secret Server v11.7.31 (protocol handler version 6.0.3.26) where, within the protocol handler function, URI's were compared before normalization and canonicalizati 0.7%
  • CVE-2024-52926 Medium 6.5 Delinea Privilege Manager before 12.0.2 mishandles the security of the Windows agent. 0.2%
  • CVE-2024-5866 Medium 5.0 Arbitrary Directory Listing in Centrify PAS 0.4%
  • CVE-2024-5865 High 7.7 Arbitrary File Reading in Centrify PAS 0.5%
  • CVE-2024-25652 High 7.6 In Delinea PAM Secret Server 11.4, it is possible for a user assigned "Administer Reports" permission and/or with access to Report functionality via UNLIMITED ADMIN MODE (with access to the Report fun 0.6%
  • CVE-2023-4589 Critical 9.1 Insufficient verification of data authenticity vulnerability in Delinea Secret Server 0.3%
  • CVE-2023-4588 Medium 6.8 File accessibility vulnerability in Delinea Secret Server 0.3%