Palo Alto Networks Idira Endpoint Privilege Manager vulnerabilities

3 CVEs affecting Palo Alto Networks Idira Endpoint Privilege Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-45174, published 2026-06-11.

More from Palo Alto Networks.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-45175, published 2026-06-11. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Idira Endpoint Privilege Manager Agent versions prior to 26.5 exhibit improper access control within internal agent validation processes. A local attacker could potentially bypass built-in security…
• CVE-2026-45174, published 2026-06-11. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Idira Endpoint Privilege Manager Linux Agent versions prior to 26.5 allow a local attacker to potentially compromise the agent daemon initialization. CyberArk Security Bulletin: CA26-19
• CVE-2026-45176, published 2026-06-11. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Idira Endpoint Privilege Manager Agent versions prior to 26.5 exhibit improper access control within high-privileged agent components. A local, low-privileged attacker could exploit this by…