Vulnerabilidades de CyberArk
CVEs publicadas que afetam produtos de CyberArk: 3 registro(s), com severidade, exploração e correções.
CVE-2026-2914
Alta · 7.8
CWE-269 24/02/2026
Improper Privilege Management em Cyberark Endpoint Privilege Manager
CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower allow potential unauthorized privilege elevation leveraging CyberArk elevation dialogs
CVE-2025-66374
Alta · 7.8
CWE-269 03/02/2026
Improper Privilege Management em Cyberark Endpoint Privilege Manager
CyberArk Endpoint Privilege Manager Agent through 25.10.0 allows a local user to achieve privilege escalation through policy elevation of an Administration task.
CVE-2025-13762
Média · 4.8
CWE-20 27/11/2025
Client-Side Denial of Service Condition in SWS Extension prior to version 2.2.30305
Improper Input Validation vulnerability in CyberArk CyberArk Secure Web Sessions Extension on Chrome, Edge allows Denial of Service when trying to starting new SWS sessions.This issue affects CyberArk Secure Web Sessions Extension: before 2.2.30305.