CVE-2026-79813: Vulnerability in Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)

This vulnerability in HPE ClearPass Policy Manager client software allows a local attacker with low privileges to escalate their privileges to execute commands with higher privileges. Exploitation requires certain conditions outside the attacker's control, limiting the ease of exploitation. The affected versions include 6.11.0 through 6.11.15 and version 6.14.0. The CVSS 3.1 vector indicates local attack vector, high attack complexity, low privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability.

Successful exploitation could lead to full compromise of the affected system by allowing unauthorized command execution with elevated privileges. This could result in unauthorized access to sensitive data, system modification, or denial of service. However, the requirement for specific external conditions and user interaction reduces the likelihood of widespread exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local user access to trusted individuals only and monitor for suspicious local activity. Avoid running untrusted code or scripts on affected systems. Follow any additional guidance from Hewlett Packard Enterprise once published.