SQL Injection Vulnerability in Delinea Cloud Suite
CVE-2026-2409

9.3CRITICAL

Key Information:

Vendor

Delinea

Status
Cloud Suite
Vendor
CVE Published:
19 February 2026

What is CVE-2026-2409?

A vulnerability in Delinea Cloud Suite allows for improper neutralization of special elements used in SQL commands, which can lead to argument injection. This affects versions prior to 25.2 HF1, potentially exposing systems to unauthorized database access and manipulation. It is crucial for users to update to the latest version to mitigate this security risk.

Affected Version(s)

Cloud Suite 0 < 25.2 HF1

Cloud Suite 25.2 HF1 or later

References

https://docs.delinea.com/online-help/cloud-suite/release-...
https://delinea.com/security-advisories

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Jess Parker (jparker@calottery.com)
Radu Enachi (renachi@calottery.com)
.