CVE-2026-45165
Idira Secrets Manager (Self-Hosted): Improper Authorization in REST API
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch. Under specific circumstances, an attacker could potentially leverage this to retrieve unauthorized secrets, alter administrative access controls on the branch or cause a denial of service (DoS). Idira Security Bulletin CA26-38.
| CWE | CWE-863 |
| Vendor | palo alto networks |
| Product | idira secrets manager (self-hosted) |
| Published | Oct 15, 2026 |
| Last Updated | Oct 15, 2026 |
Stay Ahead of the Next One
Get instant alerts for palo alto networks idira secrets manager (self-hosted)
Be the first to know when new unknown vulnerabilities affecting palo alto networks idira secrets manager (self-hosted) are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Palo Alto Networks / Idira Secrets Manager (Self-Hosted)
13.9 < 13.9.1
References
Credits
George Chen