CVE-2026-115828

In Secret Server versions earlier than 12.3.1, Secret Server did not always validate the PIN or biometric check when using a FIDO2-compliant device...

CVE-2026-115828

Secret Server versions earlier than 12.3.1 are vulnerable to an improper access control issue (CWE-284) because the application did not always validate the PIN or biometric check when using a FIDO2-compliant device . This flaw could allow unauthorized access or bypass intended security measures. ...

CVE-2026-115828 Secret Server device validation error

In Secret Server versions earlier than 12.3.1, Secret Server did not always validate the PIN or biometric check when using a FIDO2-compliant device...