by Kastro
Paper/Archive/CVE-2026-79796

CVE-2026-79796

Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) — Authentication Bypass Vulnerabilities in ClearPass Policy Manager

EPSS 0.5%CVSS 9.8
critical.is priorityof 100
38
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 40.3.403 × 208.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Vulnerabilities have been identified in the affected interface of ClearPass Policy Manager that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain unauthorized access to the affected system.

Affected

ProductAffectedFixed inSource
ClearPass Policy Manager (CPPM)6.14.0 – 6.14.0–CNA
ClearPass Policy Manager (CPPM)6.11.0 – 6.11.15–CNA

Scores by source

hpe (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsupport.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05158en_us&docLocale=en_US