High severity · published Oct 29, 2026
CVE-2026-92744
Delinea Privilege Manager agent unauthenticated remote code execution vulnerability
New
8.7
CVSS
–
EPSS
No
On KEV
Description
Under certain conditions, privilege manager agent allows a remote unauthenticated attacker to execute
arbitrary code as LocalSystem.
Exploitation
Is it being used?
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PM
Privilege Manager · Delinea
10.1.0 through 12.0.5796; 13.0.0 through 13.0.1058 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-92744
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-92744
delinea.com
https://delinea.com/security-advisories
More from Privilege Manager
6.5
CVE-2024-52926
Delinea Privilege Manager before 12.0.2 mishandles the security of the Windows agent