CVE-2026-45176
HIGHCVSS v4.0: 8.9
Source data as of:
At a glance
- Severity
- HIGH
- CVSS
- 8.9 v4.0 · NVD
- EPSS
- EPSS not provided by FIRST.org for this CVE
- CISA KEV
- No
- Type
- Privilege Management · NVD CWE
- Attack conditions (CVSS vector)
- No privilegesNo user interaction · Source: NVD Vector
- Published
- 2026-06-11 · Modified: 2026-06-11
- References
- Jump to references (3)
CVSS / EPSS / KEV
Source — CVSS: NVD · EPSS: FIRST.org · KEV: CISA. Data & Sources
Description
Idira Endpoint Privilege Manager Agent versions prior to 26.5 exhibit improper access control within high-privileged agent components. A local, low-privileged attacker could exploit this by manipulating an internal communication mechanism or file operation. Under specific circumstances, this could potentially allow the attacker to bypass permission restrictions and execute unauthorized local actions with elevated privileges. CyberArk Security Bulletin: CA26-19
References
Reference URLs as listed by NVD, grouped by a mechanical match on the link's host/pattern. Labels describe the link type only.