CVE-2026-2409

Critical

Published: 19/02/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

SQL injection vulnerability in Delinea Cloud Suite before 25.2 HF1 allows argument injection. The issue is due to improper neutralization of special elements in an SQL command.

Risk Assessment

An attacker can manipulate SQL queries, potentially leading to unauthorized data access or modification. This may compromise system integrity.

Recommendation

Update Delinea Cloud Suite to version 25.2 HF1 or later and audit SQL queries for security.

Original NVD description (English source)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Delinea Cloud Suite allows Argument Injection.This issue affects Cloud Suite: before 25.2 HF1.