CVE-2026-45169
Idira Privileged Access Manager (PAM) Self-Hosted Vault: Denial of Service due to Unexpected Input Processing
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Idira Privileged Access Manager (PAM) Self-Hosted Vault versions prior to 15.0.3, 14.6.5, 14.2.7, and 14.0.8 exhibit a validation vulnerability. Under specific circumstances and configuration scenarios, processing unexpected input could potentially lead to an unexpected service termination, resulting in a localized denial of service (DoS). CyberArk Security Bulletin: CA26-17
| CWE | CWE-400 |
| Vendor | cyberark software, a palo alto networks company |
| Product | pam sh vault |
| Published | Jun 12, 2026 |
Stay Ahead of the Next One
Get instant alerts for cyberark software, a palo alto networks company pam sh vault
Be the first to know when new unknown vulnerabilities affecting cyberark software, a palo alto networks company pam sh vault are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
CyberArk Software, a Palo Alto Networks Company / PAM SH Vault
14.0 < 14.0.8 14.2 < 14.2.7 14.6 < 14.6.5 15.0 < 15.0.3
References
docs.cyberark.com: https://docs.cyberark.com/pam-self-hosted/latest/en/content/release%20notes/rn-whatsnew15-0-vault.htm#15.0.3 docs.cyberark.com: https://docs.cyberark.com/pam-self-hosted/latest/en/content/release%20notes/rn-whatsnew14-6-vault.htm#14.6.5 docs.cyberark.com: https://docs.cyberark.com/pam-self-hosted/latest/en/content/release%20notes/rn-whatsnew14-2-7.htm docs.cyberark.com: https://docs.cyberark.com/pam-self-hosted/latest/en/content/release%20notes/rn-whatsnew14-0-8.htm
Credits
Palo Alto Networks thanks our internal security research teams for discovering and reporting this issue