Security Advisory

CVE-2026-15638

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-09-15 23:20:56

Last updated 2026-09-16 19:36:54

Assigner Delinea

CVSS score 9.1

State PUBLISHED

Description

An unauthenticated user with access to Secret Server could leverage a padding oracle to decrypt or encrypt data using one of the server's cryptographic keys. The key itself is not exposed.

← Browse all CVEs View on cve.org ↗