← CVE Intelligence

CVE-2026-15640

Authentication Bypass via SAML Response Manipulation PUBLISHED

Description (CNA)

Under certain conditions a valid SAML IdP response may be used to impersonate another Secret Server user.

Affected (CNA)

Vendor / productVersions
Delinea / Secret Server (On-Prem)affected 10.5.0 through 12.1.3

CWE

CWE-290

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.