CVE-2026-2409: SQL Injection
Published Feb 19, 2026
·Updated
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Delinea Cloud Suite allows Argument Injection.This issue affects Cloud Suite: before 25.2 HF1.
Affected Software
1 affected component
Delinea Cloud Suite<25.2 HF1
Event History
Feb 19, 2026
CVE Published
via MITRE·05:55 PM
Data Sourced
via MITRE·05:55 PM
DescriptionWeakness
Data Sourced
via NVD·06:25 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-2409?
CVE-2026-2409 is classified as a critical vulnerability due to its potential for SQL injection attacks.
2
How do I fix CVE-2026-2409?
To fix CVE-2026-2409, upgrade to Delinea Cloud Suite version 25.2 HF1 or later.
3
What kind of attack does CVE-2026-2409 allow?
CVE-2026-2409 allows for Argument Injection via SQL injection techniques.
4
Which versions of Delinea Cloud Suite are affected by CVE-2026-2409?
Delinea Cloud Suite versions before 25.2 HF1 are affected by CVE-2026-2409.
5
What component of Delinea Cloud Suite is impacted by CVE-2026-2409?
CVE-2026-2409 impacts the entire Delinea Cloud Suite application.