{"id":"CVE-2026-82356","published":"2026-09-23T19:19:34.620","lastModified":"2026-09-25T14:10:13.927","description":"Imprivata EAM <=26.2.6 lacks the ability to rotate its RSA key pair after deployment when generating an X.509 certificate. Using an RSA key pair indefinitely for certificate generation is against best practices.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwes":["CWE-326","CWE-327"],"vendors":[],"products":[],"references":[{"url":"https://kb.cert.org/vuls/id/273940","tags":[]},{"url":"https://www.kb.cert.org/vuls/id/273940","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}