CVE-2026-115830

8.7 high

In Secret Server versions earlier than 12.3.1, a user under certain conditions could submit an unsigned JWT and receive cloudadmin permissions in response.

Severity

CVSS 4.0

8.7 high

CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N

CWE: CWE-863
Published: 2026-10-30
Modified: 2026-10-30
Record from: the NVD, synced 2026-10-30

References

https://delinea.com/security-advisories

Check your stack JSON