// CVE · PUBLISHED 2026-10-30
CVE-2026-115828 Delinea / Secret Server (On-Prem)
9.4 · CVSS 4.0 Critical
Description In Secret Server on-prem versions earlier than 12.3.1, Secret Server did not always validate the PIN or biometric check when using a FIDO2-compliant device
← CVE Index: search every CVE from the last 30 days
This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.
Details Products Delinea / Secret Server (On-Prem) Published 30 Oct 2026 Modified 5 Nov 2026 CVSS 9.4 Critical (v4.0) Vector CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Score source CNA CWE CWE-284 Record status Awaiting Analysis