Delinea vulnerabilities

Products

• Secret Server 11
• Secret Server (on-prem) 7
• Secret Server 6
• Centrify Pas 2
• Privileged Access Service 2
• Privilege Manager 2

Newest

• delinea secret server (on-prem) Secret Server Authentication Bypass via Unauthenticated Pin Code Reset and Brute Force CVE-2026-115829 9.9 CriticalOctober 30, 2026
• delinea secret server (on-prem) Secret Server JWT issuance error CVE-2026-115830 8.7 HighOctober 30, 2026
• delinea secret server (on-prem) Secret Server device validation error CVE-2026-115828 9.4 CriticalOctober 30, 2026
• delinea privilege manager Delinea Privilege Manager agent unauthenticated remote code execution vulnerability CVE-2026-92744 Public exploit 8.7 HighOctober 29, 2026
• delinea secret server (on-prem) Authentication Bypass via SAML Response Manipulation CVE-2026-15640 9.5 CriticalSeptember 15, 2026
• delinea secret server (on-prem) Reflected Cross-Site Scripting CVE-2026-15639 9.3 CriticalSeptember 15, 2026
• delinea secret server (on-prem) Cryptographic Padding Oracle CVE-2026-15638 9.1 CriticalSeptember 15, 2026
• delinea secret server (on-prem) Delinea Secret Server FIDO2 credential registration authentication bypass vulnerability CVE-2026-19117 9.8 CriticalSeptember 2, 2026
• delinea cloud suite Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... CVE-2026-2409 9.3 CriticalFebruary 19, 2026
• delinea secret server, delinea inc. secret server on-prem +1 more Failure in Password Rotation and Check-in Mechanism in Secret Server Allows Reuse of Credentials CVE-2025-12810 5.3 MediumJanuary 27, 2026
• delinea secret server The distributed engine of Secret Server versions 11.7.49 and earlier can be exploited during an... CVE-2025-6942 3.8 LowJuly 2, 2025
• delinea secret server Secret Server version 11.7 and earlier is vulnerable to a SQL report creation vulnerability that... CVE-2025-6943 3.8 LowJuly 2, 2025
• delinea secret server Delinea addressed a reported case on Secret Server v11.7.31 (protocol handler version 6.0.3.26)... CVE-2024-12908 6.9 MediumDecember 26, 2024
• delinea privilege manager Delinea Privilege Manager before 12.0.2 mishandles the security of the Windows agent. CVE-2024-52926 6.5 MediumNovember 18, 2024
• delinea centrify pas, privileged access service +1 more Arbitrary Directory Listing in Centrify PAS CVE-2024-5866 5.0 MediumJuly 2, 2024
• delinea centrify pas, privileged access service +1 more Arbitrary File Reading in Centrify PAS CVE-2024-5865 7.7 HighJuly 2, 2024
• delinea secret server Delinea Secret Server before 11.7.000001 allows attackers to bypass authentication via the SOAP... CVE-2024-33891 8.8 HighApril 28, 2024
• delinea secret server Broken Access Control in the Report functionality of Delinea PAM Secret Server 11.4 allows... CVE-2024-25653 4.3 MediumMarch 14, 2024
• delinea secret server In Delinea PAM Secret Server 11.4, it is possible for a user (with access to the Report... CVE-2024-25652 7.6 HighMarch 14, 2024
• delinea secret server User enumeration can occur in the Authentication REST API in Delinea PAM Secret Server 11.4. This... CVE-2024-25651 5.3 MediumMarch 14, 2024
• delinea distributed engine, secret server +1 more Insecure key exchange between Delinea PAM Secret Server 11.4 and the Distributed Engine 8.4.3... CVE-2024-25650 5.9 MediumMarch 14, 2024
• delinea secret server In Delinea PAM Secret Server 11.4, it is possible for an attacker (with Administrator access to... CVE-2024-25649 6.7 MediumMarch 14, 2024
• delinea secret server Insufficient verification of data authenticity vulnerability in Delinea Secret Server CVE-2023-4589 9.1 CriticalSeptember 6, 2023
• delinea secret server File accessibility vulnerability in Delinea Secret Server CVE-2023-4588 6.8 MediumSeptember 6, 2023