Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)

• CVE-2026-79818 Medium 5.3 Authentication Bypass in the API Interface Allows Unauthorized Information Disclosure in ClearPass Policy Manager 0.3%
• CVE-2026-79817 Medium 5.5 Local Disclosure of Sensitive Information in HPE Networking ClearPass Policy Manager Client Software 0.1%
• CVE-2026-79816 Medium 5.4 Unauthenticated DOM-Based Cross-Site Scripting (XSS) Vulnerability in the ClearPass Policy Manager Client Interface 0.2%
• CVE-2026-79815 Medium 6.5 Authenticated Command Injection Vulnerability in the ClearPass Policy Manager OnGuard Agent 0.6%
• CVE-2026-79814 Medium 6.7 Local Arbitrary File Write Leading to Local Privilege Escalation in ClearPass Policy Manager OnGuard Agent <0.1%
• CVE-2026-79813 Medium 6.7 Local Privilege Escalation in ClearPass Client Software <0.1%
• CVE-2026-79812 Medium 6.1 Authenticated Local Denial-of-Service Vulnerability in the OnGuard Agent of ClearPass Policy Manager <0.1%
• CVE-2026-79811 High 7.2 Authenticated SQL Injection allows Remote Code Execution in ClearPass Policy Manager API 0.3%
• CVE-2026-79810 High 7.2 Authenticated Remote Code Execution Vulnerabilities in HPE Networking ClearPass Policy Manager 0.6%
• CVE-2026-79809 High 7.3 Unauthenticated Path Traversal in ClearPass Policy Manager API Endpoint Leads to Authorization Bypass 0.3%
• CVE-2026-79808 High 7.8 Local Authenticated Buffer Overflow Vulnerability in the ClearPass Policy Manager OnGuard Agent 0.1%
• CVE-2026-79807 High 7.8 Authenticated Local Missing Integrity Verification Vulnerability leads to Local Privilege Escalation in the ClearPass Policy Manager Windows Client Software <0.1%
• CVE-2026-79806 High 7.8 Authenticated Local Privilege Escalation in ClearPass Policy Manager OnGuard Linux Agent <0.1%
• CVE-2026-79805 Critical 9.8 Authenticated Path Traversal Vulnerability Leads to Unauthorized File Access and Modification in ClearPass Policy Manager 0.4%
• CVE-2026-79803 High 8.8 Authenticated Command Injection Leading to Privilege Escalation in ClearPass Policy Manager API 0.8%
• CVE-2026-79802 High 8.8 Command Injection Vulnerability in the ClearPass Policy Manager Client Software 1.2%
• CVE-2026-79801 Critical 9.8 Unauthenticated Missing Integrity Verification allows Remote Code Execution in ClearPass Policy Manager Client Agent 0.3%
• CVE-2026-79800 High 8.8 Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in ClearPass Policy Manager 0.6%
• CVE-2026-79799 High 8.8 Unauthenticated Stored Cross-Site Scripting (XSS) Vulnerability in ClearPass Policy Manager Web-Based Management Interface 0.3%
• CVE-2026-79798 Critical 9.9 Authenticated SQL Injection Vulnerabilities in ClearPass Policy Manager Web-Based Management Interface 0.3%
• CVE-2026-79797 High 8.8 Improper Access Control in HPE Networking ClearPass Android Client Application 0.3%
• CVE-2026-79796 Critical 9.8 Authentication Bypass Vulnerabilities in ClearPass Policy Manager 0.5%
• CVE-2026-79794 Critical 9.1 Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface 0.3%
• CVE-2026-76754 Critical 9.8 Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in ClearPass Policy Manager 0.4%
• CVE-2026-76753 Critical 9.8 Unauthenticated Format String Vulnerability in HPE Networking ClearPass Policy Manager 0.5%
• CVE-2026-76752 Critical 9.8 Authentication Bypass Vulnerabilities in HPE Networking ClearPass Policy Manager Allow Unauthorized Administrative Access 0.5%
• CVE-2026-76751 Critical 9.8 Missing Integrity Verification in the OnGuard Agent of ClearPass Policy Manager Allows Unauthenticated Remote Code Execution 0.3%
• CVE-2026-76750 Critical 9.8 Unauthenticated Deserialization of Untrusted Data allows Remote Code Execution in the Web Interface of HPE Networking ClearPass Policy Manager 0.5%
• CVE-2026-73789 Medium 5.3 Unauthenticated Insecure Parameter Manipulation allows Data Tampering In CPPM Web Interface 0.4%
• CVE-2026-73788 Medium 6.5 Privilege Escalation in ClearPass OnGuard Agent 0.4%
• CVE-2026-73787 High 7.2 Authenticated Arbitrary File Write allows Remote Code Execution via CPPM Web Interface 0.8%
• CVE-2026-73786 High 7.5 Unauthenticated Network-Based Denial of Service in CPPM systems 0.6%
• CVE-2026-73769 High 7.2 Authenticated Remote Code Execution in CPPM Web Interface 1.1%
• CVE-2024-41916 Medium 6.8 Authenticated Sensitive Information Disclosure in ClearPass Policy Manager 0.4%
• CVE-2024-41915 High 7.2 Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface 0.5%
• CVE-2024-5486 Medium 5.8 Authenticated Sensitive Information Disclosure in ClearPass Policy Manager 0.3%