CVE-2026-45174
Idira Endpoint Privilege Manager Linux Agent: Potential bypass of Agent Daemon Initialization
Severity
High 8.5
CVSS 4.0
Exploited
Not listed
EPSS
0.001
2.6th percentile
Discovered by
Unknown
Vendor-published field
Published
Jun 11, 2026
Assigned by palo_alto
Description
Idira Endpoint Privilege Manager Linux Agent versions prior to 26.5 allow a local attacker to potentially compromise the agent daemon initialization. CyberArk Security Bulletin: CA26-19
Weakness: CWE-404
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Palo Alto Networks | CyberArk Endpoint Privilege Manager | Endpoint / EDR | cna-assigner |
Vendor-reported products (1)
- CyberArk Software, a Palo Alto Networks Company · Idira Endpoint Privilege Manager
Credit
Palo Alto Networks thanks our internal security research teams for discovering and reporting this issue