Export limit exceeded: 425694 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-45178

Idira Secrets Manager Self-Hosted: Improper Access Control in Internal Cluster Endpoints

Idira Secrets Manager Self-Hosted versions 13.8.0 and lower exhibit improper access control within internal cluster endpoints. A remote, authenticated attacker possessing standard node-level credentials could leverage these endpoints to potentially retrieve unauthorized secrets or cause a denial of service (DoS). CyberArk Security Bulletin: CA26-20

CVSS 4.0 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
Cyberark Cyberark Software A Palo Alto Networks Company Paloaltonetworks
Products
Conjur Enterprise Conjur Enterprise Idira Secrets Manager and 1 more
CVE-2026-45177

Idira Secrets Manager SaaS Edge: Authentication Bypass of an internal validation mechanism

Idira Secrets Manager SaaS Edge versions prior to 1.8 exhibit improper access control within its internal authentication components. A remote, unauthenticated attacker could exploit this by submitting a specially crafted request. Under specific circumstances, this could allow the attacker to manipulate internal validation mechanisms, potentially leading to a bypass of identity verification and the unauthorized acquisition of an access token. CyberArk Security Bulletin: CA26-20

CVSS 4.0 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Cyberark Cyberark Software A Palo Alto Networks Company Paloaltonetworks
Products
Conjur Cloud Conjur Cloud Edge Finding Only Idira Secrets Manager Edge