PT-2026-20901 · Delinea · Delinea Cloud Suite

Jess Parker + 1 · Publicado 2026-02-19 · Atualizado 2026-02-23 · CVE-2026-2409

Positive Technologies (AI Summary)

CVSS v4.0

9.3

Crítica

Vetor base

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N

Name of the Vulnerable Software and Affected Versions Delinea Cloud Suite versions prior to 25.2 HF1

Description An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability exists in Delinea Cloud Suite, allowing argument injection. The issue affects the application's handling of SQL queries, potentially allowing an attacker to manipulate database operations.

Recommendations Update Delinea Cloud Suite to version 25.2 HF1 or later.

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2026-2409

Produtos afetados

Delinea Cloud Suite

Referências · 5

• https://delinea.com/security-advisories · Nota
• https://docs.delinea.com/online-help/cloud-suite/release-notes/cloud-suite/25.2.htm#Resolved · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-2409 · Nota de Segurança
• https://twitter.com/CVEnew/status/2025892039380857098 · Publicação no Twitter
• https://t.me/CVEtracker/45167 · Publicação no Telegram