CVE-2026-115829 — Vulnerability intelligence

—

Published: 2026-10-30T20:17:02.107

CVSS

8.7

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

In Secret Server versions earlier than 12.3.1, a user could bypass the initial login step and authenticate by successfully negotiating the second factor login step only.

Sources

• CVE-2026-115829
• Original advisory