Log in Start free

Vulnerability · Published Oct 6, 2026 · Assigned by hpe

CVE-2026-79797Improper Access Control in HPE Networking ClearPass Android Client Application

High 8.8

In plain English

A high-severity improper access control in ClearPass Policy Manager (CPPM) from Hewlett Packard Enterprise (HPE). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 19% of all known vulnerabilities).

Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.3%top 80.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

An improper access control vulnerability exists in the Android client application for HPE Networking ClearPass Policy Manager, where application functionality may be invoked by untrusted sources. Successful exploitation could allow an unauthenticated remote attacker, with user interaction, to obtain sensitive information from the affected user.

Affected products (as reported)

VendorProductVersions
Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) 6.14.0 – through 6.14.06.11.0 – through 6.11.15

Weakness: CWE-284 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References