CVE-2025-12811CWE-444

Cloud Suite and Privilege Access Service– HTTP request smuggling vulnerability

Medium · published February 18, 2026

CVSS v4.0
6.9
EPSS
0%
Percentile
29.8
In the wild
Unconfirmed
What it is

Improper Inconsistent Interpretation of

HTTP Requests ('HTTP Request Smuggling') in Delinea Inc. Cloud Suite and

Privileged Access Service.

If you're not using the latest Server Suite agents, this fix requires that you upgrade to Server Suite 2023.1 (agent 6.0.1) or later. * If you cannot upgrade to Release 2023.1 (agent version 6.0.1) or later, you can choose one of the following versions:

* Server Suite release 2023.0.5 (agent version 6.0.0-158)

* Server Suite release 2022.1.10 (agent version 5.9.1-337)

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00370 · 29.8th percentile
Weakness
CWE-444 · Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
Published
2026-02-18T22:08Z
EPSS history
Timeline
  • 18 FEB 22:08Z
    Cloud Suite and Privilege Access Service– HTTP request smuggling vulnerability
    cvelistv5