PatchSiren cyber security CVE debrief

CVE-2026-45177 CyberArk Software, a Palo Alto Networks Company CVE debrief

CVE-2026-45177 is a critical vulnerability in Idiria Secrets Manager SaaS Edge versions prior to 1.8. The vulnerability exhibits improper access control within its internal authentication components. A remote, unauthenticated attacker could exploit this by submitting a specially crafted request. Under specific circumstances, this could allow the attacker to manipulate internal validation mechanisms, potentially leading to a bypass of identity verification and the unauthorized acquisition of an access token. For more information, refer to [CyberArk Security Bulletin: CA26-20](resourceLinkAnnotations:ref-4).

Vendor: CyberArk Software, a Palo Alto Networks Company
Product: Conjur Cloud (Edge Finding only)
CVSS: CRITICAL 9.1
CISA KEV: Not listed in stored evidence
Original CVE published: 2026-06-11
Original CVE updated: 2026-06-11
Advisory published: 2026-06-11
Advisory updated: 2026-06-11

Who should care

Administrators and users of Idiria Secrets Manager SaaS Edge versions prior to 1.8 should be aware of this vulnerability and take necessary actions to mitigate the risk.

Technical summary

The vulnerability has a CVSS score of 9.1 and is classified as CRITICAL. It can be exploited remotely without authentication, and the attack complexity is low.

Defensive priority

high

Recommended defensive actions

Upgrade to Idiria Secrets Manager SaaS Edge version 1.8 or later.
Implement additional security measures to monitor and restrict access to the affected system.

Evidence notes

The CVE record and NVD detail can be found at [CVE-2026-45177 CVE record](resourceLinkAnnotations:cve-org) and [CVE-2026-45177 NVD detail](resourceLinkAnnotations:nvd), respectively.

Official resources

CVE-2026-45177 was published on 2026-06-11T19:16:41.903Z and modified on 2026-06-11T20:56:29.653Z.