CVE-2026-79808: Vulnerability in Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)

This vulnerability is a buffer overflow in the OnGuard agent component of HPE ClearPass Policy Manager (CPPM). Exploitation requires local authentication and can lead to arbitrary code execution with elevated privileges or denial of service on the affected host. The affected versions are 6.11.0 through 6.11.15 and 6.14.0. There is no information provided about available patches or vendor advisories. The CVSS v3.1 base score is 7.8, with vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack vector with low complexity, requiring low privileges, no user interaction, and high impact on confidentiality, integrity, and availability.

An authenticated local attacker can exploit this buffer overflow to execute arbitrary code with elevated privileges, potentially taking full control of the affected host or causing a denial of service by disrupting the ClearPass Policy Manager service. This could lead to significant security breaches or service outages.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, restrict local access to trusted users only and monitor for suspicious activity related to the OnGuard agent.