Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-115830

Secret Server JWT issuance error

Description

In Secret Server versions earlier than 12.3.1, a user under certain conditions could submit an unsigned JWT and receive cloudadmin permissions in response.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Delinea Secret Server

Default version status: unaffected

  • older versions to ≤ 12.2.7affected

References