Critical Zero-Day Bugs Crack Open CyberArk, HashiCorp Password Vaults
ID: 871c9df6-dd0e-5f81-bf6c-46b2adb29b7c
STIX ID: report--871c9df6-dd0e-5f81-bf6c-46b2adb29b7c
Feed Name: Dark Reading
Threat Score
Researchers disclosed 14 zero-day vulnerabilities across HashiCorp Vault and CyberArk Conjur at Black Hat 2025 that allow authentication bypasses, privilege escalation, and remote code execution—potentially enabling full compromise of enterprise secret managers; vendors have released patches and mitigations after coordinated disclosure.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.