CVE-2026-15638

UNKNOWN

Description

An unauthenticated user with access to Secret Server could leverage a padding oracle to decrypt or encrypt data using one of the server's cryptographic keys. The key itself is not exposed.

Timeline

Published:September 16th, 2026 12:17 AM

Last modified:September 18th, 2026 7:34 PM

CVSS Scoring

No CVSS v3 score available

Weaknesses (CWE)

CWE-327

References & Reports

Advisories, patches, and third-party reports

https://delinea.com/security-advisories

Source: NIST NVD · Data may lag official sources by up to one minute