Delinea Secret Server (On-Prem)

• CVE-2026-115829 Critical 9.9 Secret Server Authentication Bypass via Unauthenticated Pin Code Reset and Brute Force 0.5%
• CVE-2026-115830 High 8.7 Secret Server JWT issuance error 0.3%
• CVE-2026-115828 Critical 9.4 Secret Server device validation error 0.3%
• CVE-2026-15640 Critical 9.5 Authentication Bypass via SAML Response Manipulation 0.3%
• CVE-2026-15639 Critical 9.3 Reflected Cross-Site Scripting 0.4%
• CVE-2026-15638 Critical 9.1 Cryptographic Padding Oracle 0.2%
• CVE-2026-19117 Critical 9.8 Delinea Secret Server FIDO2 credential registration authentication bypass vulnerability 0.5%