What’s Vulnerable › Vulnerabilities
CVE-2026-45174: Idira Endpoint Privilege Manager Linux Agent: Potential bypass of Agent Daemon Initialization
- Severity: high (CVSS 7.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-06-11 · updated 2026-10-25
- Weakness: CWE-404
Description
Idira Endpoint Privilege Manager Linux Agent versions prior to 26.5 allow a local attacker to potentially compromise the agent daemon initialization. CyberArk Security Bulletin: CA26-19
Affected products
- CyberArk Software, a Palo Alto Networks Company Idira Endpoint Privilege Manager: before 26.5.0 — fixed in 26.5.0
- CyberArk Software, a Palo Alto Networks Company Idira Endpoint Privilege Manager: from 26.0 before 26.5 — fixed in 26.5
How to fix
Upgrade to a fixed version: CyberArk Software, a Palo Alto Networks Company Idira Endpoint Privilege Manager 26.5.0; CyberArk Software, a Palo Alto Networks Company Idira Endpoint Privilege Manager 26.5. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2026-45174 or the next vulnerability affects your stack