NetSight
high8.8

CVE-2026-45170

Idira Vendor PAM - Self-Hosted Connector versions prior 1.1.100504 under specific conditions and configuration scenarios, TLS certificate validation may not be…

Impact

Idira Vendor PAM - Self-Hosted Connector versions prior 1.1.100504 under specific conditions and configuration scenarios, TLS certificate validation may not be fully enforced. CyberArk Security Bulletin: CA26-17

Affected products

VendorProductAffected versions
PaloaltonetworksIdira Privilege Cloud Connector
from 1.1.0 before 1.1.100504

Weakness classification

References