Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-115829

Secret Server partial login bypass

Description

In Secret Server versions earlier than 12.3.1, a user could bypass the initial login step and authenticate by successfully negotiating the second factor login step only.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Delinea Secret Server

Default version status: unaffected

  • older versions to ≤ 12.2.7affected

References