Cyberark Endpoint Privilege Manager vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Cyberark Endpoint Privilege Manager: 2 record(s), with affected versions and fixes.
cpe:2.3:a:cyberark:endpoint_privilege_manager

CVE-2026-2914 High · 7.8 CWE-269 Feb 24, 2026

Improper Privilege Management in Cyberark Endpoint Privilege Manager

CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower allow potential unauthorized privilege elevation leveraging CyberArk elevation dialogs

CVE-2025-66374 High · 7.8 CWE-269 Feb 3, 2026

Improper Privilege Management in Cyberark Endpoint Privilege Manager

CyberArk Endpoint Privilege Manager Agent through 25.10.0 allows a local user to achieve privilege escalation through policy elevation of an Administration task.