Known Vulnerabilities for Vendor PAM by CyberArk Software A Palo Alto Networks Company
Listed below are 10 of the newest known vulnerabilities associated with "Vendor PAM" by "CyberArk Software A Palo Alto Networks Company".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-65911 json | In DOMPurify through 3.3.3, function predicates supplied via ADD_ATTR or ADD_TAGS to DOMPurify.sanitize() persist in internal... | Not Provided | 2026-07-23 | 2026-07-27 |
| CVE-2026-64549 json | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bpa10x: avoid OOB read of revision string in ... | Not Provided | 2026-07-27 | 2026-07-27 |
| CVE-2026-64284 json | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ensure vendor's exit handler runs before fastp... | Not Provided | 2026-07-25 | 2026-07-27 |
| CVE-2026-64210 json | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: xsk: Fix unlocked writing to ICOSQ During na... | Not Provided | 2026-07-24 | 2026-07-27 |
| CVE-2026-63303 json | A Path Traversal vulnerability exists in Quick.CMS through the URI path component of HTTP requests, where the server fails to... | Not Provided | 2026-07-28 | 2026-07-28 |
| CVE-2026-63302 json | Quick.CMS is vulnerable to Local File Inclusion (LFI) in the admin.php endpoint via the p parameter. An authenticated attacke... | Not Provided | 2026-07-28 | 2026-07-28 |
| CVE-2026-63301 json | In Quick.CMS, the administrative user interface restricts deletion of the primary language by omitting the corresponding opti... | Not Provided | 2026-07-28 | 2026-07-28 |
| CVE-2026-59948 json | Composer is a dependency Manager for the PHP language. Prior to 2.2.29 and 2.10.2, a maliciously crafted package from an untr... | Not Provided | 2026-07-08 | 2026-07-09 |
| CVE-2026-57311 json | Windu CMS does not validate types of uploaded files. An authenticated attacker can upload arbitrary files, including PHP. Th... | Not Provided | 2026-07-20 | 2026-07-20 |
| CVE-2026-57310 json | Windu CMS uses hashing algorithm based on MD5 and SHA1 with static salt to store user passwords. This allows an attacker who ... | Not Provided | 2026-07-20 | 2026-07-20 |