CVE-2026-19117 — Delinea Secret Server FIDO2 credential registration authentication bypass vulnerability
Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target account and then authenticate as that user. This issue affects on-pr…
Published: 2026-09-02 · CVSS: 9.8 · CVSS 3.1
Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target account and then authenticate as that user. This issue affects on-premises deployments only.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7