VulnSocial

CVE-2026-45171General(paloaltonetworks / idira_privileged_session_manager)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch paloaltonetworks idira_privileged_session_manager systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Incomplete input validation and improperly configured folder permissions within Idira Privileged Session Manager (PSM) versions prior to 15.0.3, 14.6.3, 14.2.5, and 14.0.5, an authenticated, low-privileged user could potentially execute arbitrary code. CyberArk Security Bulletin: CA26-17 and CA26-18

paloaltonetworks CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-22

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • idira_privileged_session_manager

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • General: 2 classified signals
  • Disclosure: 1 classified signal
  • Peaked 2d ago at 1 mentions (2026-06-12); latest day: 1
  • 3 total mentions across 3 days

Affected systems

Vendors
paloaltonetworks
Products
idira_privileged_session_manager

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-06-12: 1Mentions · 2026-06-27: 1Mentions · 2026-06-28: 1Patch / Workaround · 2026-06-12: 1Technical Details · 2026-06-12: 1Technical Details · 2026-06-27: 1Technical Details · 2026-06-28: 106-1206-2706-28
Signal classification2 categories
General
266.7%
Disclosure
133.3%
Referenced assets1 URL
Classification over time
DateTotalLabels
2026-06-121
Disclosure1
2026-06-271
General1
2026-06-281
General1
Full discourse3 posts
  • CCB Alert@CCBalert
    Disclosure

    Warning: 2 Critical Improper Access Control,Path traversal in #PaloAlto #Idira Secrets Manager SaaS,Privileged Session Manager #PSM #CyberArk CVE-2026-45171 #CVE-2026-45177 CVSS: 9.1-8.7 Remote attackers can exploit them to execute arbitrary code and bypass id verification #Patch

    Post summary

    Alert warns of two critical path traversal vulnerabilities in PaloAlto Idira Secrets Manager and CyberArk Privileged Session Manager, providing CVE IDs, CVSS scores, and noting that patches are available.

    01000240
    7.2K followersView on X
  • ゆぅさん@YY20424277
    General

    【3軸解説】「Palo Alto NetworksのIDIRA Privileged Session Manager (PSM)におけるパストラバーサルの脆弱性（CVE-2026-45171）」を、背景 / 目的 / 効果 の 3 軸で読み解きます。 背景/目的/効果の3軸で読み解きました。 #セキュリ… ▶ 無料ツール WR-Analysis: https://www.intect-i.jp/tools/wr-analysis/?utm_source=sns&utm_medium=social&utm_campaign=wr_analysis

    Post summary

    The post outlines the CVE‑2026‑45171 path traversal flaw in Palo Alto Networks' IDIRA Privileged Session Manager, but offers no PoC, exploit code, or patch information.

    0000076
    847 followersView on X
  • ゆぅさん@YY20424277
    General

    【3軸解説】「Palo Alto NetworksのIDIRA Privileged Session Manager (PSM)におけるパストラバーサルの脆弱性（CVE-2026-45171）」を、背景 / 目的 / 効果 の 3 軸で読み解きます。 背景/目的/効果の3軸で読み解きました。 #セキュリ… ▶ 無料ツール WR-Analysis: https://www.intect-i.jp/tools/wr-analysis/?utm_source=sns&utm_medium=social&utm_campaign=wr_analysis

    Post summary

    The post provides a brief analysis introduction of the CVE‑2026‑45171 pass traversal flaw in Palo Alto Networks IDIRA PSM but offers no PoC, exploit, or patch details.

    0000062
    845 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Apppaloaltonetworksidira_privileged_session_manager---

Explore more

Back to dashboardpaloaltonetworks CVEsidira_privileged_session_manager vulnerabilities