CVEvulnerability

CVE-2026-82356

7.5 HIGH Published 2026-09-23 Modified 2026-09-25 Official page ↗
Status
Awaiting Analysis
Published
2026-09-23
Last modified
2026-09-25
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-326, CWE-327

Description

Imprivata EAM <=26.2.6 lacks the ability to rotate its RSA key pair after deployment when generating an X.509 certificate. Using an RSA key pair indefinitely for certificate generation is against best practices.

Related

Weakness · CWE (2)

  • CWE-326 Inadequate Encryption Strength weakness
  • CWE-327 Use of a Broken or Risky Cryptographic Algorithm weakness

References