Idira CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Idira CVE published 2026-10-15

CVE-2026-45165

CVE-2026-45165: Idiria Secrets Manager (Self-Hosted) has an improper authorization vulnerability in its REST API, allowing authenticated users with limited privileges to perform unauthorized actions on policy branches. This could lead to unauthorized secret retrieval, alteration of administrative access controls, or denial of service (DoS). Defenders should assess exposure and prioritize remediation, espe [truncated]