Live › vulnerability › CVE-2026-92744
Delinea Privilege Manager's Windows agent can be made to run attacker code as LocalSystem by a remote unauthenticated attacker under unspecified conditions. Fixed in agent 12.0.5804 and 13.0.2064; blocking inbound TCP 5593 is the vendor's workaround.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 23:27 UTC. All times on this page are UTC.
The sources do not name the product or the configuration that makes the agent reachable. Teams that run the privilege manager agent on Windows endpoints should look at it first. unknown
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Delinea Privilege Manager Windows agent | vendor | >= 10.1.0, <= 12.0.5796; >= 13.0.0, <= 13.0.1058 | 12.0.5804, 13.0.2064 |
10.1.0 to 12.0.5796 and 13.0.0 to 13.0.105812.0.5804 or later (v12 line) or 13.0.2064 or later (v13 line)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Under certain conditions, privilege manager agent allows a remote unauthenticated attacker to execute arbitrary code as LocalSystem.
This page as .md · .json · in your agent: get_signal("CVE-2026-92744")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.