CVE-2026-15640

Under certain conditions a valid SAML IdP response may be used to impersonate another Secret Server user.

Published Sep 16, 2026
CVSS 9.5 critical
0.3% chance of exploitation in the next 30 days (EPSS)

Affected software

Delinea Secret Server

CVE-2026-15640 at the National Vulnerability Database