CVE-2026-45177 — Idira Secrets Manager SaaS Edge: Authentication Bypass of an internal validation mechanism
Idira Secrets Manager SaaS Edge versions prior to 1.8 exhibit improper access control within its internal authentication components. A remote, unauthenticated attacker could exp…
Published: 2026-06-11 · CVSS: 9.1 · CVSS 4.0
Idira Secrets Manager SaaS Edge versions prior to 1.8 exhibit improper access control within its internal authentication components. A remote, unauthenticated attacker could exploit this by submitting a specially crafted request. Under specific circumstances, this could allow the attacker to manipulate internal validation mechanisms, potentially leading to a bypass of identity verification and the unauthorized acquisition of an access token. CyberArk Security Bulletin: CA26-20
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7