Threat Intelligence Database

CVE-2026-79818 is a medium severity vulnerability in Hewlett Packard Enterprise ClearPass Policy Manager (CPPM). It involves an API interface flaw that could allow an unauthenticated remote attacker to bypass authentication controls and obtain sensitive information. The vulnerability affects specific versions of CPPM. There are no known exploits in the wild and no patch information is provided.

CVE-2026-79817 is a medium severity vulnerability in Hewlett Packard Enterprise ClearPass Policy Manager client software that allows local attackers with limited privileges to disclose sensitive information. The vulnerability does not require user interaction and does not impact integrity or availability. It affects specific versions of ClearPass Policy Manager.

CVE-2026-79813 is a local privilege escalation vulnerability in Hewlett Packard Enterprise ClearPass Policy Manager (CPPM) client software. A low-privileged local user could exploit this flaw to execute commands with elevated privileges if certain external conditions are met. The vulnerability affects specific versions of CPPM client software. The CVSS score is 6.7, indicating a medium severity level. No public exploits or patches are currently documented.

CVE-2026-79812 is a denial of service vulnerability in the OnGuard agent of Hewlett Packard Enterprise ClearPass Policy Manager. An authenticated local attacker could exploit this flaw to disrupt the normal operation of the agent service. The vulnerability affects specific versions of ClearPass Policy Manager, with a medium severity rating and a CVSS score of 6.1. There is no information about available patches or vendor advisories indicating remediation status.

CVE-2026-79811 is a SQL injection vulnerability in the API of Hewlett Packard Enterprise ClearPass Policy Manager (CPPM). It allows a remote authenticated attacker with administrative privileges to perform SQL injection attacks. Exploitation could lead to arbitrary execution of database commands, impacting confidentiality, integrity, and availability of the system. The vulnerability affects versions 6.11.0 through 6.11.15 and version 6.14.0. The CVSS score is 7.2, indicating high severity.

CVE-2026-79810 is a high-severity remote code execution vulnerability in Hewlett Packard Enterprise ClearPass Policy Manager (CPPM). It affects versions 6.11.0 through 6.11.15 and version 6.14.0. An authenticated remote attacker with high privileges could exploit this flaw to execute arbitrary commands on the underlying operating system without user interaction.

CVE-2026-79809 is a high-severity vulnerability in Hewlett Packard Enterprise ClearPass Policy Manager (CPPM) that allows unauthenticated remote attackers to exploit a path traversal flaw in an API endpoint. Successful exploitation enables attackers to influence authorization decisions and be assigned unintended roles, potentially impacting confidentiality, integrity, and availability.

CVE-2026-79806 is a privilege escalation vulnerability in the Hewlett Packard Enterprise ClearPass Policy Manager (CPPM) OnGuard Linux agent. It allows a malicious user on a Linux instance to escalate their privileges to root. The vulnerability affects specific versions of the software and has a high severity rating with a CVSS score of 7.8.

CVE-2026-79803 is a command injection vulnerability in the API of Hewlett Packard Enterprise ClearPass Policy Manager (CPPM). An authenticated remote attacker could exploit this flaw to escalate privileges and gain administrative control over the affected system. The vulnerability has a high severity with a CVSS score of 8.8. It affects specific versions of CPPM, including 6.11.0 through 6.11.15 and version 6.14.0. There is no information provided about available patches or vendor advisories.

CVE-2026-79802 is a command injection vulnerability in Hewlett Packard Enterprise ClearPass Policy Manager client software. An attacker able to supply crafted input could execute arbitrary commands with elevated privileges on the affected host. The vulnerability affects versions 6.11.0 through 6.11.15 and version 6.14.0. It has a high severity with a CVSS score of 8.8. No patch or vendor advisory details are provided in the input data.