{"metadata": {"vulnerability": "CVE-2026-15640", "count": 17, "kinds": {"milestone": 4, "sighting": 5, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-07-13T18:18:24.315Z", "date_only": false, "value": "2026-07-13T18:18:24.315Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-15640", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-15T23:22:15.196Z", "date_only": false, "value": "2026-09-15T23:22:15.196Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-15640", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-16T00:17:03Z", "date_only": false, "value": "2026-09-16T00:17:03Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-43CM-C736-GJ85", "record": "GHSA-43CM-C736-GJ85", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-16T00:17:03.577Z", "date_only": false, "value": "2026-09-16T00:17:03.577", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-15640", "record": "FKIE_CVE-2026-15640", "field": "published"}, {"timestamp": "2026-09-16T00:31:34Z", "date_only": false, "value": "2026-09-16T00:31:34Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-43CM-C736-GJ85", "record": "GHSA-43CM-C736-GJ85", "field": "published"}, {"timestamp": "2026-09-16T00:31:34Z", "date_only": false, "value": "2026-09-16T00:31:34Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-43CM-C736-GJ85", "record": "GHSA-43CM-C736-GJ85", "field": "modified"}, {"timestamp": "2026-09-16T01:04:08.808Z", "date_only": false, "value": "2026-09-16T01:04:08.808Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Delinea", "record": "CVE-2026-15640", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-16T01:19:54.337Z", "date_only": false, "value": "2026-09-16T01:19:54.337255Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5nvvpu2odugbx", "record": "CVE-2026-15640", "field": "creation_timestamp", "uuid": "62155c77-6992-44e1-97ea-6ac43980d084", "content": "CVE-2026-15640 - Authentication Bypass via SAML Response Manipulation\nCVE ID : CVE-2026-15640\n \n Published : Sept. 16, 2026, 12:17 a.m. | 15\u00a0minutes ago\n \n Description : Under certain conditions a valid SAML IdP response may be used to impersonate another Secret Server user.\n ...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/5nvvpu2odugbx"}, {"timestamp": "2026-09-16T01:30:27.267Z", "date_only": false, "value": "2026-09-16T01:30:27.267527Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvlyiczaap24", "record": "cve-2026-15640", "field": "creation_timestamp", "uuid": "d38d69cf-a5d5-47af-821b-cc9570b8cba0", "content": "CRITICAL: Delinea Secret Server (On-Prem, v10.5.0 \u2013 12.1.3) suffers auth bypass via SAML spoofing (CVE-2026-15640). No fix yet \u2014 monitor for abnormal logins. https://radar.offseq.com/threat/cve-2026-15640-cwe-290-authentication-bypass-by-spoofing-in-delinea-secret-server-on-prem-e1dc96081cdc3445 ...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mvlyiczaap24"}, {"timestamp": "2026-09-16T04:08:31.081Z", "date_only": false, "value": "2026-09-16T04:08:31.081841Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvmbcymmf62b", "record": "CVE-2026-15640", "field": "creation_timestamp", "uuid": "9cf54925-73d9-463c-8f81-049492aab9ca", "content": "\ud83d\udea8 CVE-2026-15640 \u2014 CVSS 9.5 CRITICAL\n\nUnder certain conditions a valid SAML IdP response may be used to impersonate another Secret Server user.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-15640\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mvmbcymmf62b"}, {"timestamp": "2026-09-16T08:30:04.850Z", "date_only": false, "value": "2026-09-16T08:30:04.850323Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvmpwpenrb2j", "record": "CVE-2026-15640", "field": "creation_timestamp", "uuid": "61292ba6-9ab1-46f7-8aea-c0f02b2c2e9a", "content": "CVE-2026-15640 - secret server (on-prem)\nIf your on\u2011premises Secret Server trusts SAML authentication, an attacker could craft a valid SAML response that lets them log in as another user. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#secretserver #delinea #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mvmpwpenrb2j"}, {"timestamp": "2026-09-16T14:17:31.005Z", "date_only": false, "value": "2026-09-16T14:17:31.005149Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/117281144842260353", "record": "CVE-2026-15640", "field": "creation_timestamp", "uuid": "508dab88-3c1f-45b0-bebd-cc51048253ac", "content": "Go hack more Secret Server shit.\nhttps://delinea.com/security-advisories\n\nAuthentication Bypass via SAML Response Manipulation - CVE-2026-15640\nReflected Cross-Site Scripting - CVE-2026-15639\nCryptographic Padding Oracle - CVE-2026-15638", "url": "https://infosec.exchange/users/cR0w/statuses/117281144842260353"}, {"timestamp": "2026-09-16T19:37:32.364Z", "date_only": false, "value": "2026-09-16T19:37:32.364446Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-15640", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-16T19:37:32.364Z", "date_only": false, "value": "2026-09-16T19:37:32.364446Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-15640", "record": "FKIE_CVE-2026-15640", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-16T19:37:42.603Z", "date_only": false, "value": "2026-09-16T19:37:42.603Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-15640", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-16T19:37:42.603Z", "date_only": false, "value": "2026-09-16T19:37:42.603Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-15640", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-18T19:34:36.657Z", "date_only": false, "value": "2026-09-18T19:34:36.657", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-15640", "record": "FKIE_CVE-2026-15640", "field": "lastModified"}]}