CVE-2026-15640
CriticalCVSS 9.5Summary
Under certain conditions a valid SAML IdP response may be used to impersonate another Secret Server user. The vulnerability affects the SAML authentication mechanism.
Risk Assessment
An attacker may gain access to other Secret Server users' accounts, potentially leading to unauthorized access to stored secrets and credentials.
Recommendation
Apply the vendor's available patches for Secret Server addressing SAML response validation. Consider restricting or monitoring SAML integrations until the fix is deployed.
Other vulnerabilities in Secret Server
See all- CVE-2026-15639Critical
An attacker can craft a malicious link that, if used by a legitimate user, may cause the user's browser to run JavaScript supplied by the attacker. The vulnerability affects the link processing mechanism.
- CVE-2026-15638Critical
An unauthenticated user with access to Secret Server could leverage a padding oracle to decrypt or encrypt data using one of the server's cryptographic keys. The key itself is not exposed.
Original NVD description (English source)
Under certain conditions a valid SAML IdP response may be used to impersonate another Secret Server user.