CVE-2026-45174
Idira Endpoint Privilege Manager Linux Agent: Potential bypass of Agent Daemon Initialization
Severity
High 8.5
CVSS 4.0
Exploited
Not listed
EPSS
0.001
2.7th percentile
Discovered by
Unknown
Published by the vendor
Published
Jun 11, 2026
Assigned by palo_alto
Description
Idira Endpoint Privilege Manager Linux Agent versions prior to 26.5 allow a local attacker to potentially compromise the agent daemon initialization. CyberArk Security Bulletin: CA26-19
Weakness: CWE-404
Affected products
| Vendor | Product | Category | Matched by |
|---|
No product mapping yet — this CVE is pending taxonomy review.
Vendor-reported affected versions (1)
- CyberArk Software, a Palo Alto Networks Company · Idira Endpoint Privilege Manager
Credit
Palo Alto Networks thanks our internal security research teams for discovering and reporting this issue