Medium · 5.3 CVE-2025-12812 EUVD-2025-207856GHSA-6f4f-6mw4-9rmf

Cloud Suite and Privilege Access Service – SQL Injection

Published Feb 18, 2026 · Updated Feb 19, 2026 · Assigned by Delinea

Description

Improper Neutralization of Special Elements used in an SQL Command
('SQL Injection') in Delinea Inc. Cloud Suite and Privileged Access Service.

Remediation: This issue is fixed in Cloud Suite: 25.1

Vendor	Product	Affected	Fixed
Delinea	Cloud Suite and Privileged Access Service	23.1.2 and earlier	25.1 and above