CVE-2026-45165EPSS p10.1%
CVE-2026-45165CVE-2026-45165
Description
An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch. Under specific circumstances, an attacker could potentially leverage this to retrieve unauthorized secrets, alter administrative access controls on the branch or cause a denial of service (DoS). Idira Security Bulletin CA26-38.
Scoring
| EPSS | 0.21% probability of exploitation · percentile 10.1% · 2026-10-16T12:02:51Z |
| Last modified | 2026-10-15 |