by Kastro
Paper/Archive/CVE-2026-76751

CVE-2026-76751

Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) — Missing Integrity Verification in the OnGuard Agent of ClearPass Policy Manager Allows Unauthenticated Remote Code Execution

EPSS 0.3%CVSS 9.8
critical.is priorityof 100
34
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 22.6.226 × 204.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A missing integrity verification vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could allow an unauthenticated, remote attacker to execute arbitrary code on the affected endpoint with the elevated privileges of the agent.

Affected

ProductAffectedFixed inSource
ClearPass Policy Manager (CPPM)6.14.0 – 6.14.0–CNA
ClearPass Policy Manager (CPPM)6.11.0 – 6.11.15–CNA

Scores by source

hpe (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsupport.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05158en_us&docLocale=en_US