Critical (9.8) in broadcom privileged access manager. EPSS 9.4% chance of exploitation in the next 30 days.
An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to execute arbitrary commands with specially crafted requests.
Severity
CVSS 3.1
9.8 critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
9.4% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)