Known Vulnerabilities for Secret Server by Thycotic
Listed below are 8 of the newest known vulnerabilities associated with "Secret Server" by "Thycotic".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-62241 json | clawvet self-hosted API server (apps/api) before 0.7.5 hard-codes a fallback JWT secret ('clawvet-dev-secret-change-me') in a... | Not Provided | 2026-07-17 | 2026-07-17 |
| CVE-2026-62236 json | grav-plugin-login before 3.8.11 contains a cross-site request forgery (CSRF) vulnerability in the login.regenerate2FASecret f... | Not Provided | 2026-07-17 | 2026-07-17 |
| CVE-2026-59207 json | n8n is an open source workflow automation platform. Prior to 2.27.4 and 2.28.1, the AI Agents feature did not enforce the All... | Not Provided | 2026-07-09 | 2026-07-09 |
| CVE-2026-58482 json | Network-AI, a TypeScript/Node.js multi-agent orchestrator, has a shipped, exported, documented feature called `ApprovalInbox`... | Not Provided | 2026-07-20 | 2026-07-20 |
| CVE-2026-56278 json | Flowise before 3.1.0 (affected versions 3.0.13 and earlier) uses a weak hardcoded default secret ('flowise') for the express-... | Not Provided | 2026-06-30 | 2026-07-01 |
| CVE-2026-56269 json | Flowise before 3.1.0 (npm package flowise, versions 3.0.13 and earlier) uses a weak hardcoded default value 'Secre$t' for the... | Not Provided | 2026-06-24 | 2026-06-24 |
| CVE-2026-55990 json | In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, when the 'dnscrypt:' clause lists more 'dnscrypt-provider-cert:' file... | Not Provided | 2026-07-22 | 2026-07-22 |
| CVE-2026-55435 json | Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.30.0 and prior t... | Not Provided | 2026-07-07 | 2026-07-09 |
| CVE-2026-54887 json | Use of Default Cryptographic Key vulnerability in Erlang/OTP ssl (DTLS server) allows predictable DTLS cookie computation dur... | Not Provided | 2026-07-02 | 2026-07-03 |
| CVE-2026-53725 json | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. From version 9.8.0 to... | Not Provided | 2026-06-12 | 2026-06-13 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Thycotic | Secret Server | 8.8.000004 | |||
| Application | Thycotic | Secret Server | 8.8.000001 | |||
| Application | Thycotic | Secret Server | 8.8.000000 | |||
| Application | Thycotic | Secret Server | 8.7.000000 | |||
| Application | Thycotic | Secret Server | 8.6.000010 | |||
| Application | Thycotic | Secret Server | 8.6.000009 | |||
| Application | Thycotic | Secret Server | 8.6.000000 | |||
| Application | Thycotic | Secret Server | 8.5.000000 | |||
| Application | Thycotic | Secret Server | 8.4.000004 | |||
| Application | Thycotic | Secret Server | 8.4.000000 | |||
| Application | Thycotic | Secret Server | 8.3.000019 | |||
| Application | Thycotic | Secret Server | 8.3.000002 | |||
| Application | Thycotic | Secret Server | 8.3.000001 | |||
| Application | Thycotic | Secret Server | 8.3.000000 | |||
| Application | Thycotic | Secret Server | 8.2.000001 | |||
| Application | Thycotic | Secret Server | 8.2.000000 | |||
| Application | Thycotic | Secret Server | 8.1.000014 | |||
| Application | Thycotic | Secret Server | 8.1.000011 | |||
| Application | Thycotic | Secret Server | 8.1.000000 | |||
| Application | Thycotic | Secret Server | 8.0.000005 |