Threat database

An authentication bypass vulnerability in the SSH daemon of AOS-8 allows an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation allows an attacker to gain administrative privileges leading to complete compromise of the AOS-8 host.

A vulnerability in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct SQL injection attacks against the AOS-10 instance. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

Sensitive information disclosure vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to obtain sensitive information from the affected system. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

A vulnerability in the web-based management interface of AOS could allow an unauthenticated remote attacker to conduct SQL injection attacks against the AOS instance. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

Buffer overflow vulnerabilities exist in the affected interface of AOS-10 that could lead to unauthenticated remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system, leading to complete system compromise.

Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to bypass existing authentication controls and run arbitrary commands on the underlying host. Successful exploitation could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise.

Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL injection attacks against an affected AOS-8 instance. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL injection attacks against an affected AOS-8 instance. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

Buffer overflow vulnerabilities in the affected interface of AOS-10 could lead to unauthenticated remote code execution by sending specially crafted packets to the affected interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.

Command injection vulnerabilities exist in the affected interface of AOS-8 that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

CVE-2026-79818 is a medium severity vulnerability in Hewlett Packard Enterprise ClearPass Policy Manager (CPPM). It involves an API interface flaw that allows an unauthenticated remote attacker to bypass authentication controls. Exploiting this vulnerability could enable the attacker to access sensitive information from the affected system. The vulnerability affects specific versions of CPPM, including 6.11.0 through 6.11.15 and version 6.14.0. No known exploits are reported in the wild, and no patch information is provided.

CVE-2026-79817 is a medium severity vulnerability in Hewlett Packard Enterprise ClearPass Policy Manager client software that allows local attackers with limited privileges to disclose sensitive information. The vulnerability does not require user interaction and impacts confidentiality without affecting integrity or availability.

CVE-2026-79816 is a medium severity vulnerability in Hewlett Packard Enterprise ClearPass Policy Manager (CPPM) that allows an unauthenticated remote attacker to perform a DOM-based cross-site scripting (XSS) attack via a client interface. Exploitation could enable execution of arbitrary script code in the victim's browser within the affected interface. The affected versions are 6.11.0 through 6.11.15 and exactly 6.14.0. No known exploits are reported in the wild. No patch or remediation information is provided in the available data.

CVE-2026-79815 is a command injection vulnerability in the OnGuard agent of Hewlett Packard Enterprise's ClearPass Policy Manager (CPPM). It allows an authenticated remote attacker to inject arbitrary commands, potentially executing them with elevated privileges on the affected Windows endpoint. The vulnerability affects specific versions of CPPM, including 6.11.0 through 6.11.15 and version 6.14.0. The CVSS 3.1 base score is 6.5, indicating a medium severity level.

CVE-2026-79814 is an arbitrary file write vulnerability in Hewlett Packard Enterprise ClearPass Policy Manager OnGuard agent. It allows a local user with limited privileges to elevate their privileges by writing arbitrary files if certain conditions outside their control are met. Exploitation could lead to arbitrary code execution with elevated privileges on the affected system. The vulnerability affects specific versions of ClearPass Policy Manager. The CVSS score is 6.7, indicating a medium severity level.

CVE-2026-79813 is a local privilege escalation vulnerability in Hewlett Packard Enterprise ClearPass Policy Manager (CPPM) client software. It allows a low-privileged local user to execute commands with elevated privileges if certain external conditions are met. The vulnerability affects specific versions of CPPM client software. The CVSS score is 6.7, indicating a medium severity level. No known exploits are reported in the wild. No patch or remediation details are provided in the available data.

CVE-2026-79812 is a denial of service vulnerability in the OnGuard agent of Hewlett Packard Enterprise ClearPass Policy Manager (CPPM). An authenticated local attacker could exploit this flaw to disrupt the normal operation of the agent service. The vulnerability affects specific versions of CPPM, including 6.11.0 through 6.11.15 and version 6.14.0. The CVSS v3.1 base score is 6.1, indicating a medium severity impact primarily due to availability disruption.

CVE-2026-79811 is a high-severity SQL injection vulnerability in Hewlett Packard Enterprise's ClearPass Policy Manager (CPPM) API. It allows a remote authenticated attacker with administrative privileges to execute arbitrary database commands. The vulnerability affects specific versions of CPPM including 6.11.0 through 6.11.15 and 6.14.0. No known exploits are reported in the wild, and no patch information is provided in the source data.

CVE-2026-79810 is a high-severity remote code execution vulnerability in Hewlett Packard Enterprise ClearPass Policy Manager (CPPM). It affects authenticated users with high privileges, allowing them to execute arbitrary commands on the underlying operating system. The vulnerability impacts versions 6.11.0 through 6.11.15 and version 6.14.0. No patch information is provided in the available data. The CVSS score is 7.2, indicating significant impact on confidentiality, integrity, and availability.