by Kastro
Paper/Archive/CVE-2026-15640

CVE-2026-15640

Delinea Secret Server (On-Prem) — Authentication Bypass via SAML Response Manipulation

EPSS 0.3%CVSS 9.5
critical.is priorityof 100
33
CVSS 9.5 (CNA)9.5 / 10 × 3028.5Not in CISA KEV+300.0EPSS percentile 24.3.243 × 204.9No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Under certain conditions a valid SAML IdP response may be used to impersonate another Secret Server user.

Affected

ProductAffectedFixed inSource
Secret Server (On-Prem)10.5.0 – 12.1.3–CNA

Scores by source

Delinea (CNA)9.5CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

advisorydelinea.com/security-advisories