CVE-2026-45177 | BDVDB-2026-339769 Detail

Description#

Idira Secrets Manager SaaS Edge versions prior to 1.8 exhibit improper access control within its internal authentication components. A remote, unauthenticated attacker could exploit this by submitting a specially crafted request. Under specific circumstances, this could allow the attacker to manipulate internal validation mechanisms, potentially leading to a bypass of identity verification and the unauthorized acquisition of an access token. CyberArk Security Bulletin: CA26-20

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-06-11Record published in the CVE List.