CVE-2026-45173: CyberArk Software, a Palo Alto Networks Company

Описание

Оригинално описание

Idira Identity Browser Extension (Chrome, Firefox, and Edge builds) versions prior to 26.8.1 exhibit an origin validation flaw within its internal web-page verification routines. If an authenticated user navigates to a specially crafted webpage, this interaction could potentially allow a remote attacker to trigger unauthorized application interaction or execution parameters within the context of that authenticated browser session. CyberArk Security Bulletin: CA26-21

Засегнати продукти

• CyberArk Software, a Palo Alto Networks Company Identity Browser Extensions: 26.0.0 преди 26.8.1

Вид слабост

• CWE-346 Грешка при валидиране на произхода (Origin)

История

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-45173
• https://nvd.nist.gov/vuln/detail/CVE-2026-45173
• https://docs.cyberark.com/find-identity-administration-docs/latest/en/content/getstarted/identity-new-doc-location.htm