Skip to content
OpenAdvisories
Critical · 9.4 CVE-2026-115828 EUVD-2026-114372GHSA-c2wq-cmq4-v95g

Secret Server device validation error

Published Oct 30, 2026 · Updated Nov 5, 2026 · Assigned by Delinea

Description

In Secret Server on-prem versions earlier than 12.3.1, Secret Server did not always validate the PIN or biometric check when using a FIDO2-compliant device

Affected products

VendorProductAffectedFixed
Delinea Secret Server (On-Prem) older versions – ≤ 12.2.7 —

References