CVE-2026-45170— Idira Privilege Cloud Connector: Potential Security Bypass due to Incomplete TLS Certificate Validation
Possible ATT&CK Techniques 1AI
T1557 · Adversary-in-the-MiddleAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| CyberArk Software, a Palo Alto Networks Company | PAM SH Connector | 1.1.0< 1.1.100504 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-45170
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Idira Privilege Cloud Connector: Potential Security Bypass due to Incomplete TLS Certificate Validation
Source: NVD (National Vulnerability Database)
Vulnerability Description
Idira Privilege Cloud Connector versions prior 1.1.100504 under specific conditions and configuration scenarios, TLS certificate validation may not be fully enforced. CyberArk Security Bulletin: CA26-17
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
证书验证不恰当
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| CyberArk Software, a Palo Alto Networks Company | PAM SH Connector | 1.1.0 ~ 1.1.100504 | - |
II. Public POCs for CVE-2026-45170
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-45170
请登录查看更多情报信息。
Vendor Pages for CVE-2026-45170 (1)
- 🔗 Docs Homevendor-advisory
IV. Related Vulnerabilities
Same vendor: CyberArk Software, a Palo Alto Networks Company
- CVE-2026-45169
Idira Privileged Access Manager (PAM) Self-Hosted Vault: Den - CVE-2026-45171
Idira Privileged Session Manager (PSM): Potential Code Execu - CVE-2026-45172
Idira Privileged Session Manager for SSH (PSMP): Arbitrary C - CVE-2026-45173
Idira Identity Browser Extension: Unauthorized Application I - CVE-2026-45174
Idira Endpoint Privilege Manager Linux Agent: Potential bypa
Same weakness: CWE-295
- CVE-2026-9259
Canon EOS Network Setting Tool 1.5.0 证书验证漏洞 - CVE-2026-9258
Canon EOS Network Setting Tool 1.5.0 SSH主机密钥验证漏洞 - CVE-2026-45175
Idira Endpoint Privilege Manager Agent: Security Control and - CVE-2026-40992
Mail Auto-Configuration Does Not Enable SSL Hostname Verific - CVE-2026-53475
Assisted-migration-agent: tls verification disabled on all v
V. Comments for CVE-2026-45170
No comments yet