216.73.216.233

CVE-2026-45169

· Published 12/06/2026 07:16 · Modified 12/06/2026 15:30 · Author: The MITRE Corporation

Labels: CVE-2026-45169 2026-06-12CVE-2026-45169CWE-400[email protected]

Essential information

Published
12/06/2026 07:16
Modified
12/06/2026 15:30
Author
The MITRE Corporation
Creator
The MITRE Corporation
CVSS
8.7 HIGH (v3) 8.7 HIGH (v4.0)
CISA KEV
No
CWE
CWE-400
CVSS vector
—

CVSS metrics

Description

Idira Privileged Access Manager (PAM) Self-Hosted Vault versions prior to 15.0.3, 14.6.5, 14.2.7, and 14.0.8 exhibit a validation vulnerability. Under specific circumstances and configuration scenarios, processing unexpected input could potentially lead to an unexpected service termination, resulting in a localized denial of service (DoS). CyberArk Security Bulletin: CA26-17

NVD status

Status
Awaiting Analysis — CVE has been recently published to the CVE List and has been received by the NVD.
Source
[email protected]
NVD
View on NVD

Affected products (CPE)

ProductCPE
cyberark / idira privileged access manager cpe:2.3:a:cyberark:idira_privileged_access_manager:*:<15.0.3>:*:*:*:*:*:*
cyberark / idira privileged access manager cpe:2.3:a:cyberark:idira_privileged_access_manager:*:<14.6.5>:*:*:*:*:*:*
cyberark / idira privileged access manager cpe:2.3:a:cyberark:idira_privileged_access_manager:*:<14.2.7>:*:*:*:*:*:*
cyberark / idira privileged access manager cpe:2.3:a:cyberark:idira_privileged_access_manager:*:<14.0.8>:*:*:*:*:*:*

References