CyberArk vulnerabilities
Published CVEs affecting CyberArk products: 3 record(s), with severity, exploitation and fixes.
CVE-2026-2914
High · 7.8
CWE-269 Feb 24, 2026
Improper Privilege Management in Cyberark Endpoint Privilege Manager
CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower allow potential unauthorized privilege elevation leveraging CyberArk elevation dialogs
CVE-2025-66374
High · 7.8
CWE-269 Feb 3, 2026
Improper Privilege Management in Cyberark Endpoint Privilege Manager
CyberArk Endpoint Privilege Manager Agent through 25.10.0 allows a local user to achieve privilege escalation through policy elevation of an Administration task.
CVE-2025-13762
Medium · 4.8
CWE-20 Nov 27, 2025
Client-Side Denial of Service Condition in SWS Extension prior to version 2.2.30305
Improper Input Validation vulnerability in CyberArk CyberArk Secure Web Sessions Extension on Chrome, Edge allows Denial of Service when trying to starting new SWS sessions.This issue affects CyberArk Secure Web Sessions Extension: before 2.2.30305.