This vulnerability (CVE-2026-45169) in CyberArk's PAM SH Vault is classified as CWE-400 (Uncontrolled Resource Consumption). It arises from insufficient validation of input under specific circumstances, which can cause the service to terminate unexpectedly. The affected versions are prior to 15.0.3, 14.6.5, 14.2.7, and 14.0.8. The CVSS 4.0 base score is 8.7, indicating high severity, with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on availability. No official remediation level or patch information is provided in the available data, and no known exploits are reported in the wild.

Successful exploitation can cause a localized denial of service by terminating the PAM SH Vault service unexpectedly. This impacts availability but does not indicate compromise of confidentiality or integrity. The vulnerability can be triggered remotely without authentication or user interaction.

Patch status is not yet confirmed — check the vendor advisory (CyberArk Security Bulletin: CA26-17) for current remediation guidance. Until an official fix is available, monitor vendor communications for updates. No specific temporary mitigations are provided in the available data.