CVE-2026-15640: Delinea Secret Server On-Prem

Critical severity, CVSS 9.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Under certain conditions a valid SAML IdP response may be used to impersonate another Secret Server user.

Affected products

• Delinea Secret Server On-Prem: from 10.5.0, up to and including 12.1.3

Published 2026-09-16. Last modified 2026-09-18.