Threat database

CVE-2026-79809 is a high-severity unauthenticated path traversal vulnerability in an API endpoint of Hewlett Packard Enterprise's ClearPass Policy Manager (CPPM). Exploitation allows a remote attacker without authentication to influence authorization decisions and be assigned unintended roles. The vulnerability affects versions 6.11.0 through 6.11.15 and version 6.14.0. The CVSS 3.1 score is 7.3, indicating a significant risk with network attack vector, no privileges or user interaction required, and impacts on confidentiality, integrity, and availability.

CVE-2026-79808 is a buffer overflow vulnerability in the OnGuard agent of Hewlett Packard Enterprise's ClearPass Policy Manager (CPPM). An authenticated local user could exploit this flaw to execute arbitrary code with elevated privileges or disrupt the service availability. The vulnerability affects specific versions 6.11.0 through 6.11.15 and version 6.14.0. It has a high severity rating with a CVSS score of 7.8. No information about available patches or exploits in the wild is provided.

CVE-2026-79807 is a vulnerability in Hewlett Packard Enterprise ClearPass Policy Manager Windows client software. It involves missing integrity verification that could allow a local malicious user to elevate privileges and execute code with elevated rights. The vulnerability affects specific versions of the software. The CVSS score is 7.8, indicating high severity.

CVE-2026-79806 is a privilege escalation vulnerability in the Hewlett Packard Enterprise ClearPass Policy Manager (CPPM) OnGuard Linux agent. It allows a malicious user on a Linux instance to escalate their privileges to root. The vulnerability affects specific versions of CPPM Linux agent. The CVSS score is 7.8, indicating high severity. No known exploits are reported in the wild. No patch or remediation details are provided in the input data.

CVE-2026-79805 is a critical authenticated path traversal vulnerability in Hewlett Packard Enterprise ClearPass Policy Manager (CPPM). Exploitation allows an attacker to read and modify certain files on the underlying operating system. The vulnerability affects versions 6.11.0 through 6.11.15 and version 6.14.0. It has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability. No patch links or vendor advisories are provided, and no known exploits are reported in the wild.

CVE-2026-79803 is a command injection vulnerability in the API of Hewlett Packard Enterprise ClearPass Policy Manager (CPPM). An authenticated remote attacker could exploit this flaw to escalate privileges and gain administrative control over the affected system. The vulnerability has a high severity with a CVSS score of 8.8. It affects specific versions of CPPM including 6.11.0 through 6.11.15 and version 6.14.0. No information about available patches or vendor advisories is provided.

CVE-2026-79802 is a command injection vulnerability in Hewlett Packard Enterprise ClearPass Policy Manager client software. An attacker supplying crafted input could execute arbitrary commands with elevated privileges on the affected host. The vulnerability has a high severity with a CVSS score of 8.8. It affects specific versions of ClearPass Policy Manager, including 6.11.0 through 6.11.15 and version 6.14.0. No patch or remediation information is provided in the available data.

CVE-2026-79801 is a critical vulnerability in Hewlett Packard Enterprise ClearPass Policy Manager (CPPM) client agent software. It involves a missing integrity verification that could allow an unauthenticated remote attacker to introduce untrusted code. Successful exploitation may lead to arbitrary code execution on the affected client system. The vulnerability affects specific versions of CPPM client agent software. No patch information is currently provided.

CVE-2026-79800 is an authenticated path traversal vulnerability in the command line interface of Hewlett Packard Enterprise ClearPass Policy Manager (CPPM) version 6.14.0. A low-privileged authenticated remote attacker could exploit this flaw to execute arbitrary code with elevated privileges on the underlying operating system. The vulnerability has a high severity rating with a CVSS 3.1 score of 8.8. No patch or remediation details are currently provided by the vendor.

CVE-2026-79799 is a high-severity stored cross-site scripting (XSS) vulnerability in the web-based management interface of Hewlett Packard Enterprise ClearPass Policy Manager (CPPM). An unauthenticated remote attacker could exploit this flaw to execute arbitrary script code in the browser of an administrative user. This could lead to full compromise of the administrative interface session and potentially allow control over the affected system.

CVE-2026-79798 is a critical SQL injection vulnerability in Hewlett Packard Enterprise ClearPass Policy Manager's web-based management interface. It allows a low-privileged authenticated remote attacker to execute arbitrary database commands. The vulnerability affects specific versions of ClearPass Policy Manager. The CVSS score is 9.9, indicating a severe impact on confidentiality, integrity, and availability.

CVE-2026-79797 is an improper access control vulnerability in the Android client application for Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM). This flaw allows application functionality to be invoked by untrusted sources. Successful exploitation requires user interaction and could enable an unauthenticated remote attacker to obtain sensitive information from the affected user. The vulnerability affects specific versions of the CPPM Android client.

A critical vulnerability (CVE-2026-79796) exists in Hewlett Packard Enterprise ClearPass Policy Manager (CPPM) that allows an unauthenticated remote attacker to bypass authentication controls. Exploiting this flaw could grant unauthorized access to the affected system, impacting confidentiality, integrity, and availability. The vulnerability affects specific versions of CPPM including 6.11.0 through 6.11.15 and version 6.14.0. The CVSS score is 9.8, indicating a high severity risk. No patch or remediation details are provided in the available data.

CVE-2026-79794 is a critical SQL injection vulnerability in the web-based management interface of Hewlett Packard Enterprise ClearPass Policy Manager (CPPM). It allows an authenticated remote attacker to execute arbitrary database commands. The vulnerability affects specific versions of CPPM, potentially compromising confidentiality, integrity, and availability of the system.

CVE-2026-76754 is a critical SQL injection vulnerability in Hewlett Packard Enterprise ClearPass Policy Manager (CPPM). It allows an unauthenticated remote attacker to execute arbitrary database commands via a vulnerable interface. The affected versions are 6.11.0 through 6.11.15 and version 6.14.0. The vulnerability has a CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability.

CVE-2026-76753 is a critical format string vulnerability in Hewlett Packard Enterprise ClearPass Policy Manager (CPPM). It allows an unauthenticated remote attacker to corrupt process memory, potentially leading to arbitrary code execution. The vulnerability affects specific versions of CPPM. The CVSS score is 9.8, indicating high severity. No vendor patch or official remediation information is provided in the input data.

CVE-2026-76752 is a critical authentication bypass vulnerability in Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM). It affects specific versions of the product and allows unauthenticated remote attackers to bypass authentication controls via the web-based management and API interfaces. Successful exploitation grants administrative access to the system, posing a high risk to confidentiality, integrity, and availability.

CVE-2026-76751 is a critical vulnerability in the OnGuard agent of Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM). It involves a missing integrity verification that could allow an unauthenticated remote attacker to execute arbitrary code with elevated privileges. The vulnerability affects specific versions of CPPM, potentially leading to full compromise of the affected endpoint.

CVE-2026-76750 is a critical deserialization vulnerability in the web interface of Hewlett Packard Enterprise ClearPass Policy Manager (CPPM). It allows an unauthenticated remote attacker to execute arbitrary code on the affected system. The vulnerability affects specific versions of CPPM, including 6.11.0 through 6.11.15 and version 6.14.0. The CVSS score is 9.8, indicating a high severity with network attack vector, no privileges required, and no user interaction needed.

CVE-2026-76749 is a medium severity vulnerability in Hewlett Packard Enterprise (HPE) AOS-Switch (AOS-S) that allows an unauthenticated remote attacker to disclose sensitive information. The vulnerability affects versions from 16.11.0000 through 16.11.0031 inclusive. Exploitation does not impact integrity or availability but can lead to high confidentiality loss. No known exploits are reported in the wild, and no patch or remediation information is currently provided.