Known Vulnerabilities for Secret Server by Delinea
Listed below are 2 of the newest known vulnerabilities associated with "Secret Server" by "Delinea".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-123786 json | Agenta before 0.122.5 contains a server-side request forgery vulnerability that allows workspace members with workflow edit r... | Not Provided | 2026-11-06 | 2026-11-06 |
| CVE-2026-121802 json | @better-auth/expo before 1.7.16 allows certain account-takeover outcomes (e.g., unauthenticated changes of any account's emai... | Not Provided | 2026-11-04 | 2026-11-06 |
| CVE-2026-119201 json | Nuxt is an open-source web development framework for Vue.js. From 4.6.0 until 4.6.3, nuxt dev stores a generated appSecret in... | Not Provided | 2026-10-29 | 2026-10-30 |
| CVE-2026-118760 json | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. From 0.5.1 until 2.17.0, ... | Not Provided | 2026-10-29 | 2026-11-03 |
| CVE-2026-118679 json | n8n before 1.123.83, 2.41.4, and 2.42.1 contains a server-side request forgery vulnerability in the Slack Trigger webhook tha... | Not Provided | 2026-10-28 | 2026-11-04 |
| CVE-2026-117472 json | Psono Server CE && EE versions 4.0.33 through 7.2.3 compared the request path for the bulk-secret-read endpoint with a hard-c... | Not Provided | 2026-10-27 | 2026-11-04 |
| CVE-2026-116240 json | In server mode pgAdmin 4 validates a path into the user's storage directory with check_access_permission(), which builds the ... | Not Provided | 2026-10-30 | 2026-11-06 |
| CVE-2026-115931 json | Postiz lets a signed-in user ask the backend to run a function on one of their connected channels. The backend did not restri... | Not Provided | 2026-10-23 | 2026-11-02 |
| CVE-2026-115830 json | In Secret Server on-prem versions earlier than 12.3.1, a user under certain conditions could submit an unsigned JWT and recei... | Not Provided | 2026-10-30 | 2026-11-05 |
| CVE-2026-115829 json | In Secret Server on-prem versions earlier than 12.3.1, a user could cause a two-factor pin code to be generated for any accou... | Not Provided | 2026-10-30 | 2026-11-05 |