First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2026-79803

HighCVSS 8.8/10Last modified Oct 8, 2026

Description

A command injection vulnerability exists in the API of ClearPass Policy Manager. Successful exploitation could allow an authenticated remote attacker to escalate privileges and gain administrative control of the affected system.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

Vendor	Product	Versions
Hewlett Packard Enterprise (HPE)	ClearPass Policy Manager (CPPM)	>= 6.14.0, <= 6.14.0; >= 6.11.0, <= 6.11.15

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05158en_us&docLocale=en_US

Timeline

Published: Oct 6, 2026
Last modified: Oct 8, 2026
NVD status: Awaiting Analysis

Related CVEs from 2026

CVE-2026-798047.3A vulnerability was found in SililaWijesinghe Food Ordering System up to ba314e897e3365600461e5ea59432e39ceaa0fa5. Affected by this issue is CVE-2026-798059.8An authenticated path traversal vulnerability exists in ClearPass Policy Manager. Successful exploitation could allow an attacker to read an CVE-2026-798067.8A privilege escalation vulnerability in the ClearPass Policy Manager OnGuard Linux agent could allow malicious users on a Linux instance to CVE-2026-798077.8A missing integrity verification vulnerability in the Windows client software for ClearPass Policy Manager could allow malicious users on a CVE-2026-798087.8A buffer overflow vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could allow an authenticate CVE-2026-798097.3An unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy Manager. Successful exploitation of this vulne CVE-2026-79818.1Out of bounds read in Codecs in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to obtain potentially sensitive information f CVE-2026-798107.2Remote code execution vulnerabilities exist in the affected interface of HPE Networking ClearPass Policy Manager that could allow an authent CVE-2026-798117.2A SQL injection vulnerability in the API of ClearPass Policy Manager could allow a remote authenticated attacker with administrative privile CVE-2026-798126.1A denial of service vulnerability exists in the OnGuard agent of HPE Networking ClearPass Policy Manager. Successful exploitation could allo CVE-2026-798136.7A local privilege escalation vulnerability exists in the ClearPass client software. Successful exploitation could allow a low-privileged loc CVE-2026-798146.7An arbitrary file write vulnerability in the ClearPass Policy Manager OnGuard agent could allow malicious users on a local instance to eleva

CVE-2026-79803: High severity, CVSS 8.8 | Vulnix