CVE-2026-45169

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-45169
Idira Privileged Access Manager (PAM) Self-Hosted Vault versions prior to 15.0.3, 14.6.5, 14.2.7, and 14.0.8 exhibit a validation vulnerability. Under specific circumstances and configuration scenarios, processing unexpected input could potentially lead to an unexpected service termination, resulting in a localized denial of service (DoS). CyberArk Security Bulletin: CA26-17

8.6 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 4.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope CHANGED

References
Link Resource
https://docs.cyberark.com/pam-self-hosted/latest/en/content/release%20notes/rn-whatsnew14-0-8.htm Release Notes Vendor Advisory
https://docs.cyberark.com/pam-self-hosted/latest/en/content/release%20notes/rn-whatsnew14-2-7.htm Release Notes Vendor Advisory
https://docs.cyberark.com/pam-self-hosted/latest/en/content/release%20notes/rn-whatsnew14-6-vault.htm#14.6.5 Release Notes Vendor Advisory
https://docs.cyberark.com/pam-self-hosted/latest/en/content/release%20notes/rn-whatsnew15-0-vault.htm#15.0.3 Release Notes Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:paloaltonetworks:idira_privileged_access_manager_vault:*:*:*:*:*:*:*:*
cpe:2.3:a:paloaltonetworks:idira_privileged_access_manager_vault:*:*:*:*:*:*:*:*
cpe:2.3:a:paloaltonetworks:idira_privileged_access_manager_vault:*:*:*:*:*:*:*:*
cpe:2.3:a:paloaltonetworks:idira_privileged_access_manager_vault:*:*:*:*:*:*:*:*
History

26 Oct 2026, 11:10

Type Values Removed Values Added
Summary
  • (es) Las versiones de Idira Privileged Access Manager (PAM) Self-Hosted Vault anteriores a la 15.0.3, 14.6.5, 14.2.7 y 14.0.8 presentan una vulnerabilidad de validación. Bajo circunstancias y escenarios de configuración específicos, el procesamiento de entradas inesperadas podría conducir potencialmente a una terminación inesperada del servicio, lo que resultaría en una denegación de servicio (DoS) localizada. Boletín de Seguridad de CyberArk: CA26-17
Information

Published : 2026-06-12 05:16

Updated : 2026-10-26 11:10

NVD link : CVE-2026-45169

Mitre link : CVE-2026-45169

CVE.ORG link : CVE-2026-45169

JSON object : View

Products Affected

paloaltonetworks

  • idira_privileged_access_manager_vault
CWE
CWE-400

Uncontrolled Resource Consumption