PT-2026-20543 · Delinea · Delinea Cloud Suite+1

Dawid Dudek · Published 2026-02-18 · Updated 2026-02-19 · CVE-2025-12812

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Medium

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Delinea Cloud Suite versions prior to 25.1 Delinea Privileged Access Service versions prior to 25.1

Description The software contains a flaw due to improper neutralization of special elements used in an SQL command, which could lead to SQL injection. The issue affects Delinea Cloud Suite and Privileged Access Service.

Recommendations Update Delinea Cloud Suite to version 25.1 or later. Update Delinea Privileged Access Service to version 25.1 or later.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-12812

Affected Products

Delinea Cloud Suite

Delinea Privileged Access Service

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-12812 · Security Note
• https://t.me/CVEtracker/45029 · Telegram Post
• https://trust.delinea.com · Note
• https://trust.delinea.com/?tcuUid=9681f2f0-f9b2-4c7a-abc6-1fcd65c34f46 · Note
• https://docs.delinea.com/online-help/cloud-suite/release-notes/cloud-suite/25.1.htm · Note
• https://twitter.com/CVEnew/status/2024258054167155025 · Twitter Post
• https://t.me/cveNotify/152448 · Telegram Post