Live › vulnerability › CVE-2026-115830
Secret Server versions earlier than 12.3.1 accept an unsigned JWT under certain conditions. A user who submits one receives cloudadmin permissions in response.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 20:25 UTC. All times on this page are UTC.
Organizations running Secret Server earlier than 12.3.1. The sources say exploitation requires certain conditions but do not state which ones, so exposure beyond the version check is unknown.
No product ranges from the sources yet.
12.3.1.12.3.1 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In Secret Server versions earlier than 12.3.1, a user under certain conditions could submit an unsigned JWT and receive cloudadmin permissions in response.
This page as .md · .json · in your agent: get_signal("CVE-2026-115830")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.