PAM Archives • Daily CyberSecurity

CVE-2026-1731: Critical BeyondTrust Flaw (CVSS 9.9) Allows Pre-Auth RCE BeyondTrust Vulnerability CVE-2026-1731 CVE-2024-12356 - CVE-2025-0889 BeyondTrust Privilege Escalation, Windows Security

CVE-2026-1731: Critical BeyondTrust Flaw (CVSS 9.9) Allows Pre-Auth RCE

Do Son February 9, 2026

BeyondTrust has issued a critical security alert for its popular remote access solutions, warning of a near-maximum...

Critical Devolutions Server Flaw (CVE-2025-12485, CVSS 9.4) Allows User Impersonation via Pre-MFA Cookie Hijacking Devolutions Auth Bypass, Pre-MFA Cookie Hijacking

Devolutions Auth Bypass, Pre-MFA Cookie Hijacking

Critical Devolutions Server Flaw (CVE-2025-12485, CVSS 9.4) Allows User Impersonation via Pre-MFA Cookie Hijacking

Do Son November 11, 2025

Devolutions, a leading provider of privileged access management (PAM) and remote connection solutions, has released an urgent...

Four Critical Flaws in a Privileged Access Manager Exposed by Rapid7 Privileged access manager, Securden

Four Critical Flaws in a Privileged Access Manager Exposed by Rapid7

Do Son August 26, 2025

Security researchers at Rapid7 have uncovered four serious vulnerabilities in Securden Unified Privileged Access Manager (PAM), a...

Palo Alto Networks Acquires CyberArk for $25B, Enters Identity Security Market Palo Alto CyberArk, Identity Security

Palo Alto Networks Acquires CyberArk for $25B, Enters Identity Security Market

Do Son August 1, 2025

Palo Alto Networks has announced its acquisition of Israeli cybersecurity firm CyberArk for nearly $25 billion, marking...

Linux Privilege Escalation (CVE-2025-6019): Root Access Via udisksd & libblockdev, PoC Available Linux Privilege Escalation, Sudo Vulnerabilities

Linux Privilege Escalation, Sudo Vulnerabilities

Linux Privilege Escalation (CVE-2025-6019): Root Access Via udisksd & libblockdev, PoC Available

Do Son July 7, 2025

Security researchers from SecureLayer7 published the technical details and a proof-of-concept exploit for a security vulnerability, CVE-2025-6019,...

Root Access Unlocked: How a pam_namespace Flaw Lets Attackers Elevate Privileges on Linux Linux PAM, Privilege Escalation

Root Access Unlocked: How a pam_namespace Flaw Lets Attackers Elevate Privileges on Linux

Do Son June 19, 2025

A security vulnerability was found in Linux PAM (Pluggable Authentication Modules). Tracked as CVE-2025-6020, the flaw affects...

Critical Linux Root Exploit Chain Discovered in PAM & UDisks, Affecting Major Distros Linux Root Privilege Escalation

Critical Linux Root Exploit Chain Discovered in PAM & UDisks, Affecting Major Distros

Do Son June 18, 2025

The Qualys Threat Research Unit (TRU) has unveiled two interconnected privilege escalation vulnerabilities—CVE-2025-6018 and CVE-2025-6019—that can allow...

BeyondTrust PRA Vulnerability (CVE-2025-0217) Enables Session Hijacking via Authentication Bypass BeyondTrust, authentication bypass

BeyondTrust PRA Vulnerability (CVE-2025-0217) Enables Session Hijacking via Authentication Bypass

Do Son May 5, 2025

A significant security vulnerability has been identified in BeyondTrust’s Privileged Remote Access (PRA) solution, posing a risk...

Yubico Addresses Authentication Bypass Vulnerability CVE-2025-23013 in pam-u2f Package

Do Son January 16, 2025

Yubico, a leading provider of security keys and authentication solutions, has issued a security advisory to address...

Critical Alert 1 Active Exploit Detected Today