medium5.1
CVE-2026-115828
In Secret Server versions earlier than 12.3.1, Secret Server did not always validate the PIN or biometric check when using a FIDO2-compliant device
Impact
In Secret Server versions earlier than 12.3.1, Secret Server did not always validate the PIN or biometric check when using a FIDO2-compliant device
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Delinea | Secret Server | Version older versions ≤12.2.7 |