Skip to content

CVE-2026-115828 Secret Server device validation error

CriticalCVSS 9.4 EPSS 0.31%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

In Secret Server on-prem versions earlier than 12.3.1, Secret Server did not always validate the PIN or biometric check when using a FIDO2-compliant device

Affected products

ProductAffected versionsFixed in
Delinea Secret Server (On-Prem) >= older versions, <= 12.2.7 No fix listed

References