Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-45169— Idira Privileged Access Manager (PAM) Self-Hosted Vault: Denial of Service due to Unexpected Input Processing

Quick assessment

Affected
CyberArk Software, a Palo Alto Networks Company PAM SH Vault
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

CyberArk PAM SH Vault是以色列CyberArk公司的一款特权访问管理组件。 CyberArk PAM SH Vault存在资源管理错误漏洞，该漏洞源于验证不足，在特定情况下处理意外输入可能导致意外服务终止，造成本地化拒绝服务。

AI Predicted 5.3 Difficulty: Moderate EPSS 0.63% · P49

Affected Version Matrix 4

VendorProduct Version RangeStatus
CyberArk Software, a Palo Alto Networks Company PAM SH Vault 14.0< 14.0.8 affected
14.2< 14.2.7 affected
14.6< 14.6.5 affected
15.0< 15.0.3 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-45169

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Idira Privileged Access Manager (PAM) Self-Hosted Vault: Denial of Service due to Unexpected Input Processing
Source: CVE Program / CVE List V5
Vulnerability Description
Idira Privileged Access Manager (PAM) Self-Hosted Vault versions prior to 15.0.3, 14.6.5, 14.2.7, and 14.0.8 exhibit a validation vulnerability. Under specific circumstances and configuration scenarios, processing unexpected input could potentially lead to an unexpected service termination, resulting in a localized denial of service (DoS). CyberArk Security Bulletin: CA26-17
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/U:Amber
Source: CVE Program / CVE List V5
Vulnerability Type
未加控制的资源消耗(资源穷尽)
Source: CVE Program / CVE List V5
Vulnerability Title
CyberArk PAM SH Vault 资源管理错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
CyberArk PAM SH Vault是以色列CyberArk公司的一款特权访问管理组件。 CyberArk PAM SH Vault存在资源管理错误漏洞，该漏洞源于验证不足，在特定情况下处理意外输入可能导致意外服务终止，造成本地化拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
CyberArk Software, a Palo Alto Networks Company PAM SH Vault 14.0 ~ 14.0.8 -

II. Public POCs for CVE-2026-45169

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-45169

请登录查看更多情报信息。

Vendor Pages for CVE-2026-45169 (4)

IV. Related Vulnerabilities

Same vendor: CyberArk Software, a Palo Alto Networks Company
Same weakness: CWE-400

V. Comments for CVE-2026-45169

No comments yet

Leave a comment