CVE-2026-2914

8.5 highEPSS 0.2%

High (8.5) in cyberark endpoint privilege manager. EPSS 0.2% chance of exploitation in the next 30 days.

CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower allow potential unauthorized privilege elevation leveraging CyberArk elevation dialogs

Severity

CVSS 4.0

8.5 high

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 5% of CVEs (scores of 2026-10-31)
CWE: CWE-269
Published: 2026-02-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

cyberark:endpoint_privilege_manager

References

https://docs.cyberark.com/epm/latest/en/content/release%20notes/release-notes.htm
https://www.cyberark.com/product-security/

Check your stack JSON