CVE Tools
Track your stack

Delinea

5 CVEs tracked since 2024. Since Mar 2024, none of them reached CISA KEV.

Delinea CVEs per month

Mar 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Delinea CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2024-0350
2024-044 or fewer
2024-055 or fewer
2024-064 or fewer
2024-074 or fewer
2024-084 or fewer
2024-093 or fewer
2024-104 or fewer
2024-114 or fewer
2024-123 or fewer
2025-014 or fewer
2025-023 or fewer
2025-035 or fewer
2025-044 or fewer
2025-054 or fewer
2025-064 or fewer
2025-075 or fewer
2025-084 or fewer
2025-094 or fewer
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-108 or fewer

Products

The products that kept showing up in Delinea's monthly top three, with their CVEs summed over those months.

  1. Secret Server51 month
  2. Distributed Engine11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Delinea.

  1. CVE-2026-92744Delinea Privilege Manager agent unauthenticated remote code execution vulnerability—
  2. CVE-2026-15640Authentication Bypass via SAML Response Manipulation—
  3. CVE-2026-15639Reflected Cross-Site Scripting—
  4. CVE-2026-15638Cryptographic Padding Oracle—
  5. CVE-2026-19117Delinea Secret Server FIDO2 credential registration authentication bypass vulnerability9.8
  6. CVE-2026-2409Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Delinea Cloud Suite allows Argument Injection.This issue affects Cloud Suite: before 25.2 HF1.—
  7. CVE-2025-12810Failure in Password Rotation and Check-in Mechanism in Secret Server Allows Reuse of Credentials6.5
  8. CVE-2025-6942The distributed engine versions 8.4.39.0 and earlier of Secret Server versions 11.7.49 and earlier can be exploited during an initial authorization event that would allow an attacker to impersonate...3.8
  9. CVE-2025-6943Secret Server version 11.7 and earlier is vulnerable to a SQL report creation vulnerability that allows an administrator to gain access to restricted tables.3.8
  10. CVE-2024-12908Delinea addressed a reported case on Secret Server v11.7.31 (protocol handler version 6.0.3.26) where, within the protocol handler function, URI's were compared before normalization and canonical...6.9
  11. CVE-2024-52926Delinea Privilege Manager before 12.0.2 mishandles the security of the Windows agent.6.5
  12. CVE-2024-5866Arbitrary Directory Listing in Centrify PAS5.0
  13. CVE-2024-5865Arbitrary File Reading in Centrify PAS7.7
  14. CVE-2024-33891Delinea Secret Server before 11.7.000001 allows attackers to bypass authentication via the SOAP API in SecretServer/webservices/SSWebService.asmx. This is related to a hardcoded key, the use of the...8.8
  15. CVE-2024-25651User enumeration can occur in the Authentication REST API in Delinea PAM Secret Server 11.4. This allows a remote attacker to determine whether a user is valid because of a difference in responses ...5.3

The record

Peak rank
#150 in Mar 2024
Busiest month shown
Mar 2024, 5 CVEs
Months with a KEV entry
0 since Mar 2024
Monthly snapshots
1 since 2024
Delinea's full record, month by month