https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T07:46:24.156350+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-45173 CVE-2026-45173 — Idira Identity Browser Extension: Unauthorized Application Interaction via Origin Validation Failure 2026-10-08T07:46:24.173790+00:00

Affected: CyberArk Software, a Palo Alto Networks Company Identity Browser Extensions

Idira Identity Browser Extension (Chrome, Firefox, and Edge builds) versions prior to 26.8.1 exhibit an origin validation flaw within its internal web-page verification routines. If an authenticated user navigates to a specially crafted webpage, this interaction could potentially allow a remote attacker to trigger unauthorized application interaction or execution parameters within the context of that authenticated browser session. CyberArk Security Bulletin: CA26-21