Improper Authentication vulnerability in Delinea Inc. Secret Server On-Prem (RPC Password Rotation modules).This issue affects Secret Server On-Prem: 11.8.1, 11.9.6, 11.9.25.
A secret with "change password on check in" enabled automatically checks in even when the password change fails after reaching its retry limit. This leaves the secret in an inconsistent state with the wrong password.
Remediation: Upgrade to 11.9.47 or later. The secret will remain checked out when the password change fails.
References
| Link | Resource |
|---|---|
| https://docs.delinea.com/online-help/secret-server/release-notes/ss-rn-11-9-000047.htm | Release Notes |
| https://trust.delinea.com/?tcuUid=48260de9-954d-45c2-9c66-2c9510798a0b | Vendor Advisory |
| https://trust.delinea.com/ | Product |
Configurations
Configuration 1 (hide)
|
History
06 Feb 2026, 18:26
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:delinea:secret_server:11.8.000001:*:*:*:on-premises:*:*:* cpe:2.3:a:delinea:secret_server:11.9.000025:*:*:*:on-premises:*:*:* cpe:2.3:a:delinea:secret_server:11.9.000006:*:*:*:on-premises:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| First Time |
Delinea secret Server
Delinea |
|
| CWE | NVD-CWE-Other | |
| References | () https://docs.delinea.com/online-help/secret-server/release-notes/ss-rn-11-9-000047.htm - Release Notes | |
| References | () https://trust.delinea.com/?tcuUid=48260de9-954d-45c2-9c66-2c9510798a0b - Vendor Advisory | |
| References | () https://trust.delinea.com/ - Product |
27 Jan 2026, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
| References | () https://trust.delinea.com/ - |
27 Jan 2026, 20:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-01-27 20:16
Updated : 2026-02-06 18:26
NVD link : CVE-2025-12810
Mitre link : CVE-2025-12810
CVE.ORG link : CVE-2025-12810
JSON object : View
Products Affected
delinea
- secret_server
CWE