Paper/Archive/CVE-2026-79801

CVE-2026-79801

Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) — Unauthenticated Missing Integrity Verification allows Remote Code Execution in ClearPass Policy Manager Client Agent

EPSS 0.3%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (CNA)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 25.4.254 × 205.1 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

A missing integrity verification vulnerability in the client agent software of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to introduce untrusted code. Successful exploitation could allow an attacker to execute arbitrary code on the affected client system.

Affected

ProductAffectedFixed inSource

ClearPass Policy Manager (CPPM)6.14.0 – 6.14.0–CNA

ClearPass Policy Manager (CPPM)6.11.0 – 6.11.15–CNA

Scores by source

hpe (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsupport.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05158en_us&docLocale=en_US