CVE-2026-15638
Received Received - Intake

Unauthenticated Padding Oracle in Secret Server

Publication date: 2026-09-16

Last updated on: 2026-09-16

Assigner: Delinea

Description
An unauthenticated user with access to Secret Server could leverage a padding oracle to decrypt or encrypt data using one of the server's cryptographic keys. The key itself is not exposed.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-16
Last Modified
2026-09-16
Generated
2026-10-06
AI Q&A
2026-09-16
EPSS Evaluated
2026-10-05
NVD
CVE-2026-15638
EUVD
EUVD-2026-80067

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
delinea cloud_suite to 25.2_hf1 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-327 The product uses a broken or risky cryptographic algorithm or protocol.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability allows an unauthenticated user with access to Secret Server to decrypt or encrypt data using one of the server's cryptographic keys via a padding oracle attack. The key itself remains secure and is not exposed.

Impact Analysis

An attacker could exploit this to read or modify sensitive data encrypted by Secret Server, potentially leading to unauthorized access to confidential information or tampering with stored secrets.

Compliance Impact

This vulnerability could lead to unauthorized data access or modification, violating confidentiality requirements in GDPR and HIPAA. Organizations may face compliance penalties if exploited.

Mitigation Strategies

Apply the latest security patches or updates provided by Delinea for Secret Server to address the padding oracle vulnerability. Ensure access controls are strictly enforced to limit unauthenticated user access to sensitive components.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-15638. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart