CVE-2026-2914Disclosure(cyberark / endpoint_privilege_manager)

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower allow potential unauthorized privilege elevation leveraging CyberArk elevation dialogs

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-269

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • endpoint_privilege_manager

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-02-25); latest day: 1
  • 3 total mentions across 2 days

Affected systems

Vendors
Products
endpoint_privilege_manager

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-02-25: 2Mentions · 2026-03-02: 1Technical Details · 2026-02-25: 1Technical Details · 2026-03-02: 102-2503-02
Signal classification2 categories
Disclosure
266.7%
General
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-02-252
Disclosure1General1
2026-03-021
Disclosure1
Full discourse3 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-2914 CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower allow potential unauthorized privilege elevation leveraging CyberArk elevation dialogs https://www.cve.org/CVERecord?id=CVE-2026-2914

    Post summary

    The CVE describes a privilege elevation vulnerability in CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and earlier, enabling unauthorized privilege escalation through elevation dialogs.

    00001143
    56.6K followersView on X
  • CRAC Learning - Tech@cracbot
    Disclosure

    CVE-2026-2914 (CVSS:8.5, HIGH) is Analyzed. CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower allow potential unauthorized privilege elevation le..https://nvd.nist.gov/vuln/detail/CVE-2026-2914 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

    Post summary

    The post references CVE-2026-2914, noting its high severity and potential for privilege elevation in CyberArk Endpoint Privilege Manager, but provides no evidence of exploitation or mitigation.

    0000030
    173 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-2914 CyberArk Endpoint Privilege Manager Agent Privilege Elevation Vulnerability https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-2914

    Post summary

    The snippet merely announces CVE-2026-2914 as a privilege‑elevation issue in CyberArk Endpoint Privilege Manager Agent, without providing additional technical details, exploitation evidence, or mitigation information.

    0000050
    4.0K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appcyberarkendpoint_privilege_manager---

Explore more