CVE-2026-45172

PENDING

N/A

CVSS Severity Score

EPSS Score0.1800%

EPSS Percentile16.49th

Published2026年6月11日

Last Modified2026年6月12日

Vulnerability Description

Due to incomplete input validation in Idira Privileged Session Manager for SSH (PSMP) versions prior to 15.0.2, 14.6.3, 14.2.5, and 14.0.6, an authenticated, low-privileged user could potentially execute arbitrary commands on the PSMP host. CyberArk Security Bulletins: CA26-17 and CA26-18

Affected Platforms (CPE)

No CPE configurations currently published for this record.

References & Advisories

🔗 https://docs.cyberark.com/pam-self-hosted/latest/en/content/release%20notes/rn-whatsnew14-0-6.htm

🔗 https://docs.cyberark.com/pam-self-hosted/latest/en/content/release%20notes/rn-whatsnew14-2-5.htm

🔗 https://docs.cyberark.com/pam-self-hosted/latest/en/content/release%20notes/rn-whatsnew14-6-psmp.htm#14.6.3

🔗 https://docs.cyberark.com/pam-self-hosted/latest/en/content/release%20notes/rn-whatsnew15-0-psmp.htm#15.0.2

Vulnerability Description

Affected Platforms (CPE)

References & Advisories

相關漏洞威脅