Palo Alto Networks security advisory (AV26-1056)
Canada’s Cyber Centre flags a Palo Alto Idira Secrets Manager flaw fixed in version 13.9.1.
The Canadian Centre for Cyber Security published advisory AV26-1056 on October 16, 2026, warning of a vulnerability in Palo Alto Networks Idira Secrets Manager (Self-Hosted) before version 13.9.1. The bulletin, current as of October 15, tells administrators to review Palo Alto’s advisory and apply available updates. It does not name a CVE, give a severity score, or say whether the flaw is being exploited.
- Self-hosted Idira Secrets Manager before 13.9.1 is affected.
- Version 13.9.1 is the cited fixed release.
- Advisory lists no CVE, score, or active exploitation.
Full article64 words · extracted from cyber.gc.ca · click to collapse
Serial number: AV26-1056
Date: October 16, 2026
As of October 15, 2026, Palo Alto Networks is affected by a vulnerability in the following product:
- Idira Secrets Manager (Self-Hosted)
- Prior to v13.9.1
The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.
Text extracted automatically; images, tables and formatting may be missing. Original: https://cyber.gc.ca/en/alerts-advisories/palo-alto-networks-security-advisory-av26-1056