PatchSiren

Imprivata CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Imprivata CVE published 2026-09-23

CVE-2026-82356

Imprivata EAM versions less than or equal to 26.2.6 do not rotate their RSA key pair after deployment when generating an X.509 certificate. This practice is against best practices for secure certificate generation. The CVE record and NVD entry provide details on the vulnerability. However, specific details about affected versions and remediation are limited. Defenders responsible for Imprivata EAM deploym [truncated]