CVE-2026-45170

Idira Vendor PAM - Self-Hosted Connector: Potential Security Bypass due to Incomplete TLS Certificate Validation PUBLISHED

Description (CNA)

Idira Vendor PAM - Self-Hosted Connector versions prior 1.1.100504 under specific conditions and configuration scenarios, TLS certificate validation may not be fully enforced. CyberArk Security Bulletin: CA26-17

Affected (CNA)

Vendor / product	Versions
CyberArk Software, a Palo Alto Networks Company / Vendor PAM	affected 1.1.0 before 1.1.100504

CWE

CWE-295

References

https://docs.cyberark.com/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.