Snapshot 249419
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Update on OpenSSH authentication bypass vulnerability CVE-2026-123158 (SSHhole) Trust Center Overview Delinea's cloud-native identity security platform serves as the central control plane for managing access across human, machine, third-party, and AI identities. By continuously discovering identities, assessing risk, and enforcing least-privilege access in real time, Delinea transforms identity from an organization's greatest vulnerability into its strongest line of defense. Security is built into everything we do. Delinea maintains a comprehensive Information Security Program aligned to industry-recognized frameworks and designed to protect the confidentiality, integrity, and availability of our systems and customer data. Delinea implements a robust security program that embeds security controls and continuous quality assurance at every stage of the development lifecycle. The safeguards encompass intrusion detection, DDoS prevention, vulnerability management, behavioral analytics, continuous monitoring, cryptographic protections, network security, and configuration management, ensuring our platform remains resilient against evolving threats. Compliance EU-US DPF SOC 1 Type 2 CCPA DESC Cloud Service Provider GDPR ISO/IEC 27001:2022 PCI DSS v4.0.1 SOC 2 Type 2 Documents DOCUMENTS2026 CAIQ DOCUMENTSFedRAMP Class C Timeline DOCUMENTS2026 SIG LITE DOCUMENTSBC/DR Attestation Letters DOCUMENTSPenetration Tests DOCUMENTSProcess for requesting a Penetration Test or Performance/Load Test on Customer Tenant COMPLIANCEDESC Cloud Service Provider COMPLIANCEISO/IEC 27001:2022 COMPLIANCEPCI DSS v4.0.1 COMPLIANCESOC 1 Type 2 COMPLIANCESOC 2 Type 2 PRIVACYTransfer Impact Assessments (TIA) Privacy Data Processing Addendum (DPA) EU – US Data Privacy Framework (DPF) Privacy Policy View more Data Security Encryption at Rest Encryption in Motion Key Management View more Technology Development and Acquisition A Shared Responsibility Model for SaaS Cloud Service Provider Responsibilities Customer’s Responsibilities View more Artificial Intelligence Responsible AI Statement Legal Sub-Processors Code of Conduct Master Subscription and License Agreement View more Identity and Authentication Statement on Access Control and Monitoring Infrastructure Infrastructure Security Network Defenses Statement on Backups View more Asset Management Cloud Hosting Endpoint Security Infrastructure Architecture Security Operations Application Logs Audit trails Log integrity View more Cyber Security Access Monitoring Access Reviews Cyber Risk Management View more Policies Responsible Disclosure Security Advisories CVE disclosures Trust Center Updates Update on OpenSSH authentication bypass vulnerability CVE-2026-123158 (SSHhole) Vulnerabilities Delinea is aware of the critical password authentication bypass vulnerability in OpenSSH CVE-2026-123158, also known as SSHhole. Delinea has confirmed that none of its products or services are impacted by this vulnerability. Secret Server CVEs Vulnerabilities Secret Server JWT issuance error - CVE-2026-115830 Full details: https://delinea.com/security-advisories#widget_1751999991350-1 Secret Server partial login bypass - CVE-2026-115829 Full details: https://delinea.com/security-advisories#widget_1751999991350-2 Secret Server device validation error - CVE-2026-115828 Full details: https://delinea.com/security-advisories#widget_1751999991350-3 Delinea Privilege Manager agent unauthenticated remote code execution vulnerability - CVE-2026-92744 Vulnerabilities Full details: https://delinea.com/security-advisories#widget_1751999991350-4 Update on Brotli vulnerability affecting NodeJS CVE-2026-111497 (Node2Shell) Vulnerabilities Delinea is aware of the critical vulnerability in Google's widely-used Brotli decoder that can allow attackers to compromise applications. The vulnerable component is notably included in the NodeJS runtime used by many web applications. One Delinea offering, Identity Threat Protection and Response (ITDR) was identified as affected and promptly updated on October 25. No evidence of exploitation has been discovered. All other Delinea product and services do not use Node.js in a web server context and are not affected by the vulnerabilities. Update on eMudhra compromised CA CVE-2026-108014, CVE-2026-115570 and other related CVE's Vulnerabilities Delinea is aware that eight private keys for a widely used Certificate Authority (CA), eMudhra, have been compromised. This affects all applications, operating systems and web browsers that include trust for these certificates. One Delinea offering, StrongDM, was identified as impacted. An updated version that protects against this vulnerability is in deployment to all update channels. No action is needed from customers that have automatic updates enabled. For those with automatic updates disabled, StrongDM should be updated if the Desktop Application is a version less than 25.2.0, or if the CLI is a version less than 55.99.1. All other Delinea products and services do not include trust for eMudhra certificates and are not directly affected by the vulnerabilities. External dependencies: Software applications may be indirectly affected if they depend on Operating Systems, browsers, or other platform elements that are vulnerable. Users should consider updating any systems or software components that are vulnerable to this set of CVE's. If you need help using this Trust Center, please contact us. Contact support If you think you may have discovered a vulnerability, please send us a note. Report issue