CVE-2026-79800

HighCVSS 8.8/10Last modified Oct 8, 2026

Description

An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager. Successful exploitation could allow a low-privileged authenticated remote attacker to execute arbitrary code with elevated privileges on the underlying operating system.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-22

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
Hewlett Packard Enterprise (HPE)ClearPass Policy Manager (CPPM)>= 6.14.0, <= 6.14.0

References

Timeline

Published
Oct 6, 2026
Last modified
Oct 8, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-798019.8A missing integrity verification vulnerability in the client agent software of HPE Networking ClearPass Policy Manager could allow an unauthCVE-2026-798028.8A command injection vulnerability exists in the client software of ClearPass Policy Manager. Successful exploitation could allow an attackerCVE-2026-798038.8A command injection vulnerability exists in the API of ClearPass Policy Manager. Successful exploitation could allow an authenticated remoteCVE-2026-798047.3A vulnerability was found in SililaWijesinghe Food Ordering System up to ba314e897e3365600461e5ea59432e39ceaa0fa5. Affected by this issue isCVE-2026-798059.8An authenticated path traversal vulnerability exists in ClearPass Policy Manager. Successful exploitation could allow an attacker to read anCVE-2026-798067.8A privilege escalation vulnerability in the ClearPass Policy Manager OnGuard Linux agent could allow malicious users on a Linux instance to CVE-2026-798077.8A missing integrity verification vulnerability in the Windows client software for ClearPass Policy Manager could allow malicious users on a CVE-2026-798087.8A buffer overflow vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could allow an authenticateCVE-2026-798097.3An unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy Manager. Successful exploitation of this vulneCVE-2026-79818.1Out of bounds read in Codecs in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to obtain potentially sensitive information fCVE-2026-798107.2Remote code execution vulnerabilities exist in the affected interface of HPE Networking ClearPass Policy Manager that could allow an authentCVE-2026-798117.2A SQL injection vulnerability in the API of ClearPass Policy Manager could allow a remote authenticated attacker with administrative privile
CVE-2026-79800: High severity, CVSS 8.8 | Vulnix