All 4 CVE vulnerabilities found in Secret Server (On-Prem), with AI-generated Chinese analysis, references, and POCs.
Vendor: Delinea
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-15640 | Authentication Bypass via SAML Response Manipulation CWE-290 | 9.5 | Critical | 2026-09-15 |
| CVE-2026-15639 | Reflected Cross-Site Scripting CWE-79 | 9.3 | Critical | 2026-09-15 |
| CVE-2026-15638 | Cryptographic Padding Oracle CWE-327 | 9.1 | Critical | 2026-09-15 |
| CVE-2026-19117 | Delinea Secret Server FIDO2 credential registration authentication bypass vulnerability CWE-290 | 9.8 | Critical | 2026-09-02 |
All 4 known CVE vulnerabilities affecting Secret Server (On-Prem) with full Chinese analysis, references, and POCs where available.