CVE-2025-12810

MEDIUM 6.5CVE-2025-12810 · Published 27/01/2026 · updated 17/06/2026

In short

CVE-2025-12810 is a MEDIUM (CVSS 6.5) vulnerability affecting secret server (delinea).
Chance of exploitation in the next 30 days (EPSS): 0.46%, higher than 40.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
secret server delinea	`= 11.8.000001= 11.9.000006= 11.9.000025`	No fix yet

Description

Improper Authentication vulnerability in Delinea Inc. Secret Server On-Prem (RPC Password Rotation modules).This issue affects Secret Server On-Prem: 11.8.1, 11.9.6, 11.9.25. A secret with "change password on check in" enabled automatically checks in even when the password change fails after reaching its retry limit. This leaves the secret in an inconsistent state with the wrong password. Remediation: Upgrade to 11.9.47 or later. The secret will remain checked out when the password change fails.

References

docs.delinea.com/online-help/secret-server/release-notes/ss-rn-11-9-000047.htm · Release Notes
trust.delinea.com · Vendor Advisory
trust.delinea.com · Product

More vulnerabilities in secret server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

secret server

delinea

= 11.8.000001= 11.9.000006= 11.9.000025

No fix yet

Description

More vulnerabilities in secret server

See all →