CVE-2026-15640

CVSS 9.5 (critical) · published 2026-09-16

Under certain conditions a valid SAML IdP response may be used to impersonate another Secret Server user.

Weakness: CWE-290

Source: NVD CVE-2026-15640

References

• https://delinea.com/security-advisories

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.