CVE-2026-15638EPSS p9.1%

CVE-2026-15638CVE-2026-15638

Description

An unauthenticated user with access to Secret Server could leverage a padding oracle to decrypt or encrypt data using one of the server's cryptographic keys. The key itself is not exposed.

Scoring

EPSS0.20% probability of exploitation · percentile 9.1% · 2026-10-05T12:00:23Z
Last modified2026-09-18
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.