CVE-2026-45177 – Idira Secrets Manager SaaS Edge: Authentication Bypass of an internal validation mechanism

​CVE ID :CVE-2026-45177

Published : June 11, 2026, 6:40 p.m. | 44 minutes ago

Description :Idira Secrets Manager SaaS Edge versions prior to 1.8 exhibit improper access control within its internal authentication components. A remote, unauthenticated attacker could exploit this by submitting a specially crafted request. Under specific circumstances, this could allow the attacker to manipulate internal validation mechanisms, potentially leading to a bypass of identity verification and the unauthorized acquisition of an access token. CyberArk Security Bulletin: CA26-20

Severity: 9.1 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more… To Read More Visit Read More