CVE-2026-115829

8.7 high

In Secret Server versions earlier than 12.3.1, a user could bypass the initial login step and authenticate by successfully negotiating the second factor login step only.

Severity

CVSS 4.0

8.7 high

CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N

CWE: CWE-288
Published: 2026-10-30
Modified: 2026-10-30
Record from: the NVD, synced 2026-10-30

References

https://delinea.com/security-advisories

Check your stack JSON