CRITICAL 9.5 NVD
CVE-2026-15640
Under certain conditions a valid SAML IdP response may be used to impersonate another Secret Server user.
Under certain conditions a valid SAML IdP response may be used to impersonate another Secret Server user.
References
This critical severity vulnerability with a CVSS score of 9.5 was published on 2026-09-16 via NVD.
Risk Timeline
CVE Disclosed2026-09-16 · -1 days ago
Remediation Resources
Official Advisory
delinea.com/security-advisories
vulnfeed aggregates 14211 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.