Read the docs
TI-2026-83347 Aliases CVE-2026-115829GHSA-x74x-ghfp-72vj

Delinea Secret Server Authentication Bypass via Unauthenticated Pin Code Reset

Priority MEDIUM 43CWE-288Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · None
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-288.

Summary

In Secret Server on-prem versions earlier than 12.3.1, a user could cause a two-factor pin code to be generated for any account without prior authentication. The user could then bypass the initial login step and authenticate with the second factor alone. The weakness is classified as CWE-288, Authentication Bypass Using an Alternate Path or Channel.

Written with Claude Haiku 5.5 from the sources below · 2026-11-05

Description from the CNA

In Secret Server on-prem versions earlier than 12.3.1, a user could cause a two-factor pin code to be generated for any account without prior authentication, then bypass the initial login step and authenticate using the second factor alone.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.005 43rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
DelineaSecret Server (On-Prem)older versions – 12.2.7—No fix listedCNA
  • Secret Server (On-Prem) VendorDelinea Affected older versions – 12.2.7 Fixed in — No fix listed CNA

Remediation

Upgrade Secret Server (On-Prem) to version 12.3.1 or later.

Written with Claude Haiku 5.5 from the sources below · 2026-11-05

Timeline

  1. 2026-10-30 Threatist record created from CVE-2026-115829
  2. 2026-10-30 CISA SSVC decision points changed
  3. 2026-10-30 Priority changed: MEDIUM → LOW
  4. 2026-10-30 Alias added: GHSA-x74x-ghfp-72vj
  5. 2026-11-05 Title updated · CNA
  6. 2026-11-05 CVSS score changed · CNA
  7. 2026-11-05 Affected versions changed · CNA
  8. 2026-11-05 Priority changed: LOW → MEDIUM

References

Other 1

  • TI-2024-22363 Delinea Secret Server before 11.7.000001 allows attackers to bypass authentication via… CVSS 3.1HIGH 8.8
  • TI-2024-11959 Code injection in Delinea Secret Server CVSS 3.1HIGH 8.3
  • TI-2024-16879 User enumeration can occur in the Authentication REST API in Delinea PAM Secret Server… CVSS 3.1MEDIUM 5.3
  • TI-2024-16877 In Delinea PAM Secret Server 11.4, it is possible for an attacker (with Administrator… CVSS 3.1MEDIUM 6.7
  • TI-2025-11733 Failure in Password Rotation and Check-in Mechanism in Secret Server Allows Reuse of Credentials CVSS 4.0MEDIUM 5.3
  • TI-2024-16881 Broken Access Control in the Report functionality of Delinea PAM Secret Server 11.4… CVSS 3.1MEDIUM 4.3
See all 25 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences