https://vulnfeed.org/Every disclosure, as it lands. Critical-only feed available.enhttps://vulnfeed.org/cve/CVE-2026-115829/https://vulnfeed.org/cve/CVE-2026-115829/Fri, 30 Oct 2026 20:17:02 +0000In Secret Server versions earlier than 12.3.1, a user could bypass the initial login step and authenticate by successfully negotiating the second factor login step only.https://vulnfeed.org/cve/CVE-2026-115830/https://vulnfeed.org/cve/CVE-2026-115830/Fri, 30 Oct 2026 20:17:02 +0000In Secret Server versions earlier than 12.3.1, a user under certain conditions could submit an unsigned JWT and receive cloudadmin permissions in response.