CVE-2026-92744 Delinea Privilege Manager agent unauthenticated remote code execution vulnerability
PublishedUnder certain conditions, privilege manager agent allows a remote unauthenticated attacker to execute arbitrary code as LocalSystem.
Product
2 published CVES affecting Delinea Privilege Manager, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
Newest publication first
Under certain conditions, privilege manager agent allows a remote unauthenticated attacker to execute arbitrary code as LocalSystem.
Delinea Privilege Manager before 12.0.2 mishandles the security of the Windows agent.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.