VulnSocial

CVE-2026-15640General

LOWCVSS 9.5 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Under certain conditions a valid SAML IdP response may be used to impersonate another Secret Server user.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-290

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • General: 1 classified signal
  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-09-17: 2Patch / Workaround · 2026-09-17: 1Technical Details · 2026-09-17: 109-17
Signal classification2 categories
General
150.0%
Patch
150.0%
Referenced assets2 URLs
Full discourse2 posts
  • CCB Alert@CCBalert
    Patch

    Warning: Critical flaws disclosed in #Delinea Secret Server: #CVE-2026-15640 (9.5), #CVE-2026-15639 (9.3) & #CVE-2026-15638 (9.1). Flaws allow SAML auth bypass, reflected XSS, and crypto padding oracle attacks. Read https://delinea.com/security-advisories. and #Patch #Patch #Patch

    Post summary

    The post warns of critical Delinea Secret Server flaws and directs readers to the vendor's security advisory for remediation, indicating that patches are available.

    01000288
    7.3K followersView on X
  • Cybersecurity News DE@cybsecuritynews
    General

    #schwachstellen Kritische Schwachstellen in Secret Server: CVE-2026-15639 und CVE-2026-15640 betreffen SSO und Browser-Sicherheit #cve202615639 #cve202615640 #saml #secretserver #sso https://cybersecurity-news.de/secret-server-cve-2026-15639-cve-2026-15640

    Post summary

    The tweet announces two critical vulnerabilities in Secret Server, CVE-2026-15639 and CVE-2026-15640, affecting SSO and browser security, and includes a link to a news article.

    0000031
    12 followersView on X

Explore more

Back to dashboard