CVE-2026-45173 | BDVDB-2026-339765 Detail

Description#

Idira Identity Browser Extension (Chrome, Firefox, and Edge builds) versions prior to 26.8.1 exhibit an origin validation flaw within its internal web-page verification routines. If an authenticated user navigates to a specially crafted webpage, this interaction could potentially allow a remote attacker to trigger unauthorized application interaction or execution parameters within the context of that authenticated browser session. CyberArk Security Bulletin: CA26-21

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-06-11Record published in the CVE List.
2. Version 22026-06-12Most recent update recorded in the CVE List.