CVE-2026-45177

Analyzed Analyzed - Analysis Complete

Improper Access Control in Idira Secrets Manager SaaS Edge

Publication date: 2026-06-11

Last updated on: 2026-06-22

Assigner: Palo Alto Networks, Inc.

Description

Idira Secrets Manager SaaS Edge versions prior to 1.8 exhibit improper access control within its internal authentication components. A remote, unauthenticated attacker could exploit this by submitting a specially crafted request. Under specific circumstances, this could allow the attacker to manipulate internal validation mechanisms, potentially leading to a bypass of identity verification and the unauthorized acquisition of an access token. CyberArk Security Bulletin: CA26-20

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-11

Last Modified

2026-06-22

Generated

2026-07-02

AI Q&A

2026-06-12

EPSS Evaluated

2026-06-30

NVD

CVE-2026-45177

EUVD

EUVD-2026-36289

Affected Vendors & Products

Vendor	Product	Version / Range
paloaltonetworks	idira_secrets_manager_edge	to 1.8 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

Idira Secrets Manager SaaS Edge versions prior to 1.8 have an improper access control vulnerability within their internal authentication components.

A remote, unauthenticated attacker can exploit this vulnerability by submitting a specially crafted request.

Under certain conditions, this exploitation can manipulate internal validation mechanisms, potentially allowing the attacker to bypass identity verification and gain unauthorized access tokens.

Impact Analysis

This vulnerability can allow a remote attacker without authentication to bypass identity verification.

As a result, the attacker could obtain unauthorized access tokens, potentially leading to unauthorized access to protected resources or sensitive information.

Hi! I’m here to help you understand CVE-2026-45177. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70