Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-45170

Idira Vendor PAM - Self-Hosted Connector: Potential Security Bypass due to Incomplete TLS Certificate Validation

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
palo_alto

Description

Idira Vendor PAM - Self-Hosted Connector versions prior 1.1.100504 under specific conditions and configuration scenarios, TLS certificate validation may not be fully enforced. CyberArk Security Bulletin: CA26-17

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CyberArk Software, a Palo Alto Networks Company Vendor PAM

Default version status: unaffected

  • 1.1.0 to < 1.1.100504affected

References