Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-45172

Idira Privileged Session Manager for SSH (PSMP): Arbitrary Command Execution via Improper Neutralization of Special Elements used in an OS Command

Due to incomplete input validation in Idira Privileged Session Manager for SSH (PSMP) versions prior to 15.0.2, 14.6.3, 14.2.5, and 14.0.6, an authenticated, low-privileged user could potentially execute arbitrary commands on the PSMP host. CyberArk Security Bulletins: CA26-17 and CA26-18

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Cyberark Cyberark Software A Palo Alto Networks Company Paloaltonetworks
Products
Privileged Session Manager Pam Self-hosted Privilege Cloud Idira Privileged Session Manager For Ssh
CVE-2026-45171

Idira Privileged Session Manager (PSM): Potential Code Execution due to an Incomplete Input Validation

Incomplete input validation and improperly configured folder permissions within Idira Privileged Session Manager (PSM) versions prior to 15.0.3, 14.6.3, 14.2.5, and 14.0.5, an authenticated, low-privileged user could potentially execute arbitrary code. CyberArk Security Bulletin: CA26-17 and CA26-18

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Cyberark Cyberark Software A Palo Alto Networks Company Paloaltonetworks
Products
Privileged Session Manager Privileged Session Manager Vault Idira Privileged Session Manager