[ CVE-2026-45165 · Published 15 Oct 2026 ]
Vulnerability in Palo Alto Networks Idira Secrets Manager (Self-Hosted)
CVSS 8.6
EPSS <1%No fix listed yet
[ Description ]Official description
An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch. Under specific circumstances, an attacker could potentially leverage this to retrieve unauthorized secrets, alter administrative access controls on the branch or cause a denial of service (DoS). Idira Security Bulletin CA26-38.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.