{"id":"CVE-2026-115830","published":"2026-10-30T20:17:02.240","lastModified":"2026-10-30T20:17:02.240","description":"In Secret Server versions earlier than 12.3.1, a user under certain conditions could submit an unsigned JWT and receive cloudadmin permissions in response.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-863"],"vendors":[],"products":[],"references":[{"url":"https://delinea.com/security-advisories","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}