CVE-2026-76752: Vulnerability in Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)

This vulnerability in HPE ClearPass Policy Manager (CPPM) affects versions 6.11.0 through 6.11.15 and version 6.14.0. It involves authentication bypass flaws in the web-based management and API interfaces, enabling unauthenticated remote attackers to circumvent authentication mechanisms and obtain administrative privileges on the affected system. The CVSS 3.1 base score is 9.8, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability.

Successful exploitation allows an unauthenticated remote attacker to gain administrative access to the ClearPass Policy Manager system. This could lead to full control over the affected system, compromising all managed network policies and potentially the broader network environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the ClearPass management and API interfaces to trusted networks only and monitor for any suspicious activity related to authentication bypass attempts.