CVE-2026-45177: Palo Alto Networks Idira Secrets Manager Edge

Critical severity, CVSS 9.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Idira Secrets Manager SaaS Edge versions prior to 1.8 exhibit improper access control within its internal authentication components. A remote, unauthenticated attacker could exploit this by submitting a specially crafted request. Under specific circumstances, this could allow the attacker to manipulate internal validation mechanisms, potentially leading to a bypass of identity verification and the unauthorized acquisition of an access token. CyberArk Security Bulletin: CA26-20

Affected products

• Palo Alto Networks Idira Secrets Manager Edge: before 1.8 (fixed in 1.8)

Published 2026-06-11. Last modified 2026-06-22.