CVE-2026-115830 — Vulnerability intelligence

—

Published: 2026-10-30T20:17:02.240

CVSS

8.7

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

In Secret Server versions earlier than 12.3.1, a user under certain conditions could submit an unsigned JWT and receive cloudadmin permissions in response.

Sources

• CVE-2026-115830
• Original advisory