CRITICAL 9.1 NVD

CVE-2026-15638

An unauthenticated user with access to Secret Server could leverage a padding oracle to decrypt or encrypt data using one of the server's cryptographic keys. Th

An unauthenticated user with access to Secret Server could leverage a padding oracle to decrypt or encrypt data using one of the server's cryptographic keys. The key itself is not exposed.

References

https://delinea.com/security-advisories

Published: 2026-09-16 · Source: NVD · Feed updated: 2026-09-16

This critical severity vulnerability with a CVSS score of 9.1 was published on 2026-09-16 via NVD.

Risk Timeline

CVE Disclosed2026-09-16 · -1 days ago

Remediation Resources

Official Advisory

delinea.com/security-advisories

vulnfeed aggregates 14211 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.