by Kastro
Paper/Archive/CVE-2026-76753

CVE-2026-76753

Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) — Unauthenticated Format String Vulnerability in HPE Networking ClearPass Policy Manager

EPSS 0.5%CVSS 9.8
critical.is priorityof 100
38
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 44.5.445 × 208.9No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to corrupt process memory. Successful exploitation could allow an attacker to execute arbitrary code.

Affected

ProductAffectedFixed inSource
ClearPass Policy Manager (CPPM)6.14.0 – 6.14.0–CNA
ClearPass Policy Manager (CPPM)6.11.0 – 6.11.15–CNA

Scores by source

hpe (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsupport.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05158en_us&docLocale=en_US