Search threats, CVEs… ⌘K
Back to vendor advisories
Delinea Security AdvisoriesCVE-2025-12810

Delinea Secret Server on-prem RPC Password Rotation authentication vulnerability - CVE-2025-12810

Improper Authentication vulnerability in Delinea Inc. Secret Server On-Prem (RPC Password Rotation modules). This issue affects Secret Server On-Prem: 11.8.1, 11.9.6, 11.9.25.

Read the vendor bulletin Get alerts for Secret Server on-prem
5.3CVSS out of 10Medium severity
Scope

What the vendor says is affected

  • Delinea Secret Server on-prem versions 11.8.1, 11.9.6, and 11.9.25

Versions the vendor lists as fixed

  • Upgrade to Secret Server version 11.9.47 or later The secret will remain checked out when the password change fails.
Next step

What the vendor recommends

Upgrade to Secret Server version 11.9.47 or later The secret will remain checked out when the password change fails.

Review the complete instructions on the vendor's site
Timeline

When this advisory changed

  1. Published by Delinea

    The publication date reported by the vendor.

  2. Added to SecurityAlert

    We collected the advisory from the official source.

  3. Confirmed at the source

    Our collector saw this advisory during a later source check.

Vulnerabilities

CVEs named in this advisory

CVE-2025-12810View CVSS, KEV, EPSS, and threat context
Keep investigating
See every advisory from this vendor