CVE-2026-45177Patch(paloaltonetworks / idira_secrets_manager_edge)

LOWCVSS 9.1 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch paloaltonetworks idira_secrets_manager_edge systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Idira Secrets Manager SaaS Edge versions prior to 1.8 exhibit improper access control within its internal authentication components. A remote, unauthenticated attacker could exploit this by submitting a specially crafted request. Under specific circumstances, this could allow the attacker to manipulate internal validation mechanisms, potentially leading to a bypass of identity verification and the unauthorized acquisition of an access token. CyberArk Security Bulletin: CA26-20

paloaltonetworks CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

https://docs.cyberark.com/secrets-manager-saas/latest/en/content/conjurcloud/whatsnew.htm#May132026

Weakness type (CWE)

CWE-284

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

idira_secrets_manager_edge

Threat summary

Patch or workaround signal is available
1 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
1 total mentions across 1 day

Affected systems

Vendors

paloaltonetworks

Products

idira_secrets_manager_edge

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Patch

1100.0%

Full discourse1 post

CCB Alert@CCBalert137d
Patch
Warning: 2 Critical Improper Access Control,Path traversal in #PaloAlto #Idira Secrets Manager SaaS,Privileged Session Manager #PSM #CyberArk CVE-2026-45171 #CVE-2026-45177 CVSS: 9.1-8.7 Remote attackers can exploit them to execute arbitrary code and bypass id verification #Patch
Post summary
The tweet warns about two critical CVEs in Palo Alto Idira Secrets Manager SaaS and CyberArk PSM, providing technical details and noting that a patch is available.
01000240
7.2K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	paloaltonetworks	idira_secrets_manager_edge	-	-	-

Explore more

Back to dashboard paloaltonetworks CVEs idira_secrets_manager_edge vulnerabilities