imPC@ndo IT

Tracker / CVE-2026-45171

CVE-2026-45171

High 8.8

Incomplete input validation and improperly configured folder permissions within Idira Privileged Session Manager (PSM) versions prior to 15.0.3, 14.6.3, 14.2.5, and 14.0.5, an authenticated, low-privileged user could potentially execute arbitrary code. CyberArk Security Bulletin: CA26-17 and CA26-18

Affected products and versions

paloaltonetworks idira_privileged_session_manager · 14.0 → 14.0.5
paloaltonetworks idira_privileged_session_manager · 14.2 → 14.2.5
paloaltonetworks idira_privileged_session_manager · 14.6 → 14.6.3
paloaltonetworks idira_privileged_session_manager · 15.0 → 15.0.3

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References