CVE-2026-15638Disclosure

LOWCVSS 9.1 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

An unauthenticated user with access to Secret Server could leverage a padding oracle to decrypt or encrypt data using one of the server's cryptographic keys. The key itself is not exposed.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://delinea.com/security-advisories

Weakness type (CWE)

CWE-327

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

2 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

CCB Alert@CCBalert46d
Disclosure
Warning: Critical flaws disclosed in #Delinea Secret Server: #CVE-2026-15640 (9.5), #CVE-2026-15639 (9.3) & #CVE-2026-15638 (9.1). Flaws allow SAML auth bypass, reflected XSS, and crypto padding oracle attacks. Read https://delinea.com/security-advisories. and #Patch #Patch #Patch
Post summary
Critical Delinea Secret Server vulnerabilities (CVE-2026-15640, CVE-2026-15639, CVE-2026-15638) are announced with technical details and CVSS scores, linking to a vendor advisory, but no PoC, exploit tool, active exploitation evidence, or specific patch is mentioned.
01000288
7.3K followersView on X
Cybersecurity News DE@cybsecuritynews46d
Disclosure
#schwachstellen CVE-2026-15638: Kritische Schwachstelle in Secret Server erlaubt Krypto-Angriffe ohne Anmeldung #cve202615638 #nvd #secretserver https://cybersecurity-news.de/cve-2026-15638-secret-server-kritische-schwachstelle
Post summary
German tweet announces CVE-2026-15638 as a critical unauthenticated crypto-attack vulnerability in Secret Server and links to a news article; no PoC, exploit tool, patch, or active-exploitation details are present in the tweet itself.
0000028
12 followersView on X

Explore more

Back to dashboard