VulnSocial

CVE-2026-92744

LOWCVSS 8.7 · HIGH

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Under certain conditions, privilege manager agent allows a remote unauthenticated attacker to execute arbitrary code as LocalSystem.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-295CWE-306

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 3 mentions across 1 observed day

What's happening

  • 3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-10-30: 310-30
Referenced assets1 URL
By indicator
Full discourse3 posts
  • ♫Why♥Not♪@Python_s_

    #NØØT_Security_Alerts 🚨 #ALERT — Delinea Privilege Manager Windows Agent Remote Code Execution October 29, 2026 PRODUCT: Delinea Privilege Manager (cloud and on-prem Windows agents). CVE: CVE-2026-92744 | SEVERITY: HIGH (CVSS 4.0: 8.7). AFFECTED: 10.1.0–12.0.5796 and 13.0.0–13.0.1058. IMPACT: Under certain conditions, attackers may remotely execute code as LocalSystem. EXPLOITATION STATUS: No independently verified exploitation in the wild. The vendor describes unauthenticated RCE, but its CVSS vector lists high privileges, active interaction and additional attack requirements. Exact prerequisites remain unclear. FORENSIC TRIAGE: Audit agent versions, inbound TCP/5593 exposure and unexpected SYSTEM-level activity. URGENT ACTION: Upgrade affected agents to 12.0.5804+ or 13.0.2064+, as applicable. Until upgraded, block inbound TCP/5593 for cloud deployments or restrict it to trusted management infrastructure on-prem. SOURCE: https://delinea.com/security-advisories CONFIDENCE: HIGH for impact and affected versions; LIMITED for exact attack prerequisites — Delinea advisory and release notes. #Delinea #CVE #RCE #WindowsSecurity #PAM #InfoSec

    0000028
    231 followersView on X
  • ♫Why♥Not♪@Python_s_

    #NØØT_Security_Alerts 🚨 #ALERT — Delinea Privilege Manager Windows Agent Remote Code Execution October 29, 2026 PRODUCT: Delinea Privilege Manager (cloud and on-prem Windows agents). CVE: CVE-2026-92744 | SEVERITY: HIGH (CVSS 4.0: 8.7). AFFECTED: 10.1.0–12.0.5796 and 13.0.0–13.0.1058. IMPACT: Under certain conditions, attackers may remotely execute code as LocalSystem. EXPLOITATION STATUS: No independently verified exploitation in the wild. The vendor describes unauthenticated RCE, but its CVSS vector lists high privileges, active interaction and additional attack requirements. Exact prerequisites remain unclear. FORENSIC TRIAGE: Audit agent versions, inbound TCP/5593 exposure and unexpected SYSTEM-level activity. URGENT ACTION: Upgrade affected agents to 12.0.5804+ or 13.0.2064+, as applicable. Until upgraded, block inbound TCP/5593 for cloud deployments or restrict it to trusted management infrastructure on-prem. SOURCE: https://delinea.com/security-advisories CONFIDENCE: HIGH for impact and affected versions; LIMITED for exact attack prerequisites — Delinea advisory and release notes. #Delinea #CVE #RCE #WindowsSecurity #PAM #InfoSec

    0000017
    231 followersView on X
  • ♫Why♥Not♪@Python_s_

    #NØØT_Security_Alerts 🚨 #ALERT — Delinea Privilege Manager Windows Agent Remote Code Execution October 29, 2026 PRODUCT: Delinea Privilege Manager (cloud and on-prem Windows agents). CVE: CVE-2026-92744 | SEVERITY: HIGH (CVSS 4.0: 8.7). AFFECTED: 10.1.0–12.0.5796 and 13.0.0–13.0.1058. IMPACT: Under certain conditions, attackers may remotely execute code as LocalSystem. EXPLOITATION STATUS: No independently verified exploitation in the wild. The vendor describes unauthenticated RCE, but its CVSS vector lists high privileges, active interaction and additional attack requirements. Exact prerequisites remain unclear. FORENSIC TRIAGE: Audit agent versions, inbound TCP/5593 exposure and unexpected SYSTEM-level activity. URGENT ACTION: Upgrade affected agents to 12.0.5804+ or 13.0.2064+, as applicable. Until upgraded, block inbound TCP/5593 for cloud deployments or restrict it to trusted management infrastructure on-prem. SOURCE: https://delinea.com/security-advisories CONFIDENCE: HIGH for impact and affected versions; LIMITED for exact attack prerequisites — Delinea advisory and release notes. #Delinea #CVE #RCE #WindowsSecurity #PAM #InfoSec

    0000017
    231 followersView on X

Explore more

Back to dashboard