CVE-2026-45171

PENDING

N/A

CVSS Severity Score

EPSS Score0.1930%

EPSS Percentile27.63th

Published2026年6月11日

Last Modified2026年6月12日

Vulnerability Description

Incomplete input validation and improperly configured folder permissions within Idira Privileged Session Manager (PSM) versions prior to 15.0.3, 14.6.3, 14.2.5, and 14.0.5, an authenticated, low-privileged user could potentially execute arbitrary code. CyberArk Security Bulletin: CA26-17 and CA26-18

Affected Platforms (CPE)

No CPE configurations currently published for this record.

References & Advisories

🔗 https://docs.cyberark.com/pam-self-hosted/latest/en/content/release%20notes/rn-whatsnew14-0-5.htm

🔗 https://docs.cyberark.com/pam-self-hosted/latest/en/content/release%20notes/rn-whatsnew14-2-5.htm

🔗 https://docs.cyberark.com/pam-self-hosted/latest/en/content/release%20notes/rn-whatsnew14-6-psm.htm#14.6.3

🔗 https://docs.cyberark.com/pam-self-hosted/latest/en/content/release%20notes/rn-whatsnew15-0-psm.htm#15.0.3

Vulnerability Description

Affected Platforms (CPE)

References & Advisories

相关漏洞威胁