CVE-2026-92744

{
  "etk_id": "ETK-2026-3022",
  "cve_id": "CVE-2026-92744",
  "display_id": "CVE-2026-92744",
  "ghsa_id": "GHSA-cfc3-r76f-4757",
  "euvd_id": "EUVD-2026-113417",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Improper certificate validation in Delinea Privilege Manager agent",
  "summary": "Delinea Privilege Manager agent is affected by an improper certificate validation issue. A remote unauthenticated attacker may be able to run code with LocalSystem privileges when unspecified conditions are present; the available evidence does not identify the required deployment or network precondition.",
  "mitigation": "Restrict network access to Privilege Manager agents to trusted management systems while awaiting vendor remediation. Obtain and apply Delinea's security update after confirming the fixed version with the vendor, as no fixed version is recorded in the advisory data.",
  "vendor": "Delinea",
  "product": "Privilege Manager",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 10.1.0, <= 12.0.5796",
        ">= 13.0.0, <= 13.0.1058"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "Privilege Manager",
      "purl": null
    }
  ],
  "cwes": [
    306
  ],
  "cvss_score": 8.7,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 14.720151383333333,
  "t0_at": "2026-10-29T22:56:09.879000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-29T22:56:09.879000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-29T22:56:09.879000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-92744"
    }
  }
}