9.8

CVE-2026-19117

Delinea Secret Server FIDO2 credential registration authentication bypass vulnerability

Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target account and then authenticate as
that user. This issue affects on-premises deployments only.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerDelinea
≫
Produkt Secret Server (On-Prem)
Default Statusunaffected
Version <= 11.7.61
Version 10.6.0
Status affected
Version <= 11.8.1
Version 11.8.0
Status affected
Version <= 11.9.47
Version 11.9.0
Status affected
Version <= 12.0.22
Version 12.0.0
Status affected
Version <= 12.1.2
Version 12.1.0
Status affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.28% 0.205
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
1443cd92-d354-46d2-9290-d812316ca43a 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-290 Authentication Bypass by Spoofing

This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

https://delinea.com/security-advisories