Skip to content
OpenAdvisories
Critical · 9.3 CVE-2026-15639 EUVD-2026-80068GHSA-5jwp-q2ph-6mgc

Reflected Cross-Site Scripting

Published Sep 15, 2026 · Updated Sep 16, 2026 · Assigned by Delinea

Description

An attacker can craft a malicious link that, if used by a legitimate user, may cause the user's browser to run JavaScript supplied by the attacker.

Affected products

VendorProductAffectedFixed
Delinea Secret Server (On-Prem) 10.2.19 – ≤ 11.9.48 —

References