CRITICALCVSS 9.11% EPSS
Idira Secrets Manager SaaS Edge versions prior to 1.8 exhibit improper access control within its internal authentication components. A remote, unauthenticated attacker could exploit this by submitting a specially crafted request. Under specific circumstances, this could allow the attacker to manipulate internal validation mechanisms, potentially leading to a bypass of identity verification and the unauthorized acquisition of an access token. CyberArk Security Bulletin: CA26-20
Published 2026-06-11 · last modified 2026-06-22
| Vendor | Product |
|---|---|
| paloaltonetworks | idira_secrets_manager_edge |
Ncerio by BeyondNets · data from NVD, CISA KEV, EPSS.