CVE-2026-73786

HighCVSS 7.5/10Last modified Sep 10, 2026

Description

A vulnerability in the web-based management interface of CPPM could allow an unauthenticated remote attacker to conduct a Denial-of-Service (DoS) attack. Successful exploitation could allow an attacker to cause instability and degrade performance of the vulnerable CPPM server.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-400

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

Vendor	Product	Versions
Hewlett Packard Enterprise (HPE)	ClearPass Policy Manager (CPPM)	>= 6.11.0, <= 6.11.14

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05130en_us&docLocale=en_US

Timeline

Published: Sep 9, 2026
Last modified: Sep 10, 2026
NVD status: Awaiting Analysis

Related CVEs from 2026

CVE-2026-737877.2A vulnerability in the CPPM web interface could allow an authenticated remote attacker to access directory information on a vulnerable syste CVE-2026-737886.5A vulnerability in the ClearPass OnGuard agent could allow an authenticated remote attacker to elevate their own privileges on a vulnerable CVE-2026-737895.3A vulnerability in the web-based management interface of CPPM guest account management services could allow an unauthenticated remote attack CVE-2026-73797.5Memory leak in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service CVE-2026-737908.2A vulnerability in HPE NonStop iTP WebServer can cause memory corruption and system shutdown.CVE-2026-737912.0A security vulnerability in HPE NonStop Hpjmeter can cause stack and heap buffer overflow.CVE-2026-737923.8A security vulnerability in HPE NonStop Java JToolkit can allow command Injection and buffer overflow.CVE-2026-737937.9HPE NonStop Middleware software has secret key handling and data deserialization vulnerability.CVE-2026-737944.6HPE NonStop MODULAR NSJ contains a predictable seed vulnerability in Random Number Generation (PRNG)CVE-2026-737956.4A security vulnerability in HPE NonStop TMF Auditread2 can cause Denial of Service.CVE-2026-737964.4A security vulnerability in HPE NonStop TSQLEXE may cause application crash via a crafted SQL query.CVE-2026-737975.3A security vulnerability in HPE NonStop TSQLFIL may cause address space corruption when a specific API is called.