Is CVE-2025-12811 actively exploited?

No active exploitation of CVE-2025-12811 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2025-12811 be exploited remotely?

Yes. CVE-2025-12811 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2025-12811?

CVE-2025-12811 has a CVSS score of 6.9 (MEDIUM) and an EPSS exploitation probability of 0.02%.

HOME VULNERABILITIESCVE-2025-12811

MEDIUM

CVE-2025-12811

CWE-444Published: February 18, 2026· Updated: Feb 19, 2026

6.9

CVSS v3.1

EPSS:0.01%probability of exploitation in 30 daysPercentile:2.3th

Official Description

Improper Inconsistent Interpretation of

HTTP Requests ('HTTP Request Smuggling') in Delinea Inc. Cloud Suite and

Privileged Access Service.

If you're not using the latest Server Suite agents, this fix requires that you upgrade to Server Suite 2023.1 (agent 6.0.1) or later. * If you cannot upgrade to Release 2023.1 (agent version 6.0.1) or later, you can choose one of the following versions:

* Server Suite release 2023.0.5 (agent version 6.0.0-158)

* Server Suite release 2022.1.10 (agent version 5.9.1-337)

NVD Source

Technical Analysis

CVE-2025-12811 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorNetwork

Attack ComplexityLow

Privileges Req.None

User InteractionNone

ScopeX

Impact

Confidentiality

Integrity

Availability

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X