CVE-2026-82356

Imprivata EAM: Unrotatable X.509 RSA Key Pair in Production

State: Published
Severity: 7.5 High
Published: Sep 23, 2026
Updated: Sep 24, 2026
Reserved: Aug 28, 2026

Description

Imprivata EAM <=26.2.6 lacks the ability to rotate its RSA key pair after deployment when generating an X.509 certificate. Using an RSA key pair indefinitely for certificate generation is against best practices.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	CISA-ADP

Weaknesses

CWE-326 Inadequate Encryption Strength
CWE-327 Use of a Broken or Risky Cryptographic Algorithm

Affected Products

Product	Versions
Imprivata Enterprise Access ManagementImprivata	0.0.0 through 26.2.6Affected

References

https://kb.cert.org/vuls/id/273940
https://www.kb.cert.org/vuls/id/273940

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.