CyberArk Software, a Palo Alto Networks Company
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Idira Endpoint Privilege Manager | 3 | – | Jun 11, 2026 |
| Conjur Enterprise | 1 | – | Jun 11, 2026 |
| Endpoint Privilege Manager Agent | 1 | – | Feb 25, 2026 |
| Identity Browser Extensions | 1 | – | Jun 11, 2026 |
| PAM Self-Hosted, Privilege Cloud | 1 | – | Jun 11, 2026 |
| PAM SH Vault | 1 | – | Jun 12, 2026 |
| Privileged Session Manager, Vault | 1 | – | Jun 11, 2026 |
| Conjur Cloud (Edge Finding only) | 1 | – | Jun 11, 2026 |
| Vendor PAM | 1 | – | Jun 12, 2026 |
Exploited and recent CVEs
- CVE-2026-45169 Idira Privileged Access Manager (PAM) Self-Hosted Vault: Denial of Service due to Unexpected Input Processing 0.4%
- CVE-2026-45170 Idira Vendor PAM - Self-Hosted Connector: Potential Security Bypass due to Incomplete TLS Certificate Validation 0.1%
- CVE-2026-45171 Idira Privileged Session Manager (PSM): Potential Code Execution due to an Incomplete Input Validation 0.5%
- CVE-2026-45172 Idira Privileged Session Manager for SSH (PSMP): Arbitrary Command Execution via Improper Neutralization of Special Elements used in an OS Command 0.5%
- CVE-2026-45173 Idira Identity Browser Extension: Unauthorized Application Interaction via Origin Validation Failure 0.2%
- CVE-2026-45174 Idira Endpoint Privilege Manager Linux Agent: Potential bypass of Agent Daemon Initialization 0.1%
- CVE-2026-45175 Idira Endpoint Privilege Manager Agent: Security Control and Cryptographic Validation Bypass in Internal Agent Validation Processes 0.1%
- CVE-2026-45176 Idira Endpoint Privilege Manager Agent: Local Privilege Escalation via Internal Communication or File Operation Manipulation 0.1%
- CVE-2026-45177 Idira Secrets Manager SaaS Edge: Authentication Bypass of an internal validation mechanism 0.5%
- CVE-2026-45178 Idira Secrets Manager Self-Hosted: Improper Access Control in Internal Cluster Endpoints 0.4%
- CVE-2026-2914 CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower allow potential unauthorized privilege elevation leveraging CyberArk elevation dialogs 0.2%