Known vulnerabilities in Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-79818 | A vulnerability in an API interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to… | 5.3 Medium | Oct 6, 2026 |
| CVE-2026-79817 | A sensitive information disclosure vulnerability exists in the client software of HPE Networking ClearPass Policy… | 5.5 Medium | Oct 6, 2026 |
| CVE-2026-79815 | A command injection vulnerability in the OnGuard agent of ClearPass Policy Manager could allow an authenticated remote… | 6.5 Medium | Oct 6, 2026 |
| CVE-2026-79816 | A vulnerability in a client interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote… | 5.4 Medium | Oct 6, 2026 |
| CVE-2026-79814 | An arbitrary file write vulnerability in the ClearPass Policy Manager OnGuard agent could allow malicious users on a… | 6.7 Medium | Oct 6, 2026 |
| CVE-2026-79813 | A local privilege escalation vulnerability exists in the ClearPass client software | 6.7 Medium | Oct 6, 2026 |
| CVE-2026-79812 | A denial of service vulnerability exists in the OnGuard agent of HPE Networking ClearPass Policy Manager | 6.1 Medium | Oct 6, 2026 |
| CVE-2026-79811 | A SQL injection vulnerability in the API of ClearPass Policy Manager could allow a remote authenticated attacker with… | 7.2 High | Oct 6, 2026 |
| CVE-2026-79809 | An unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy Manager | 7.3 High | Oct 6, 2026 |
| CVE-2026-79810 | Remote code execution vulnerabilities exist in the affected interface of HPE Networking ClearPass Policy Manager that… | 7.2 High | Oct 6, 2026 |
| CVE-2026-79808 | A buffer overflow vulnerability exists in the OnGuard agent of ClearPass Policy Manager | 7.8 High | Oct 6, 2026 |
| CVE-2026-79807 | A missing integrity verification vulnerability in the Windows client software for ClearPass Policy Manager could allow… | 7.8 High | Oct 6, 2026 |
| CVE-2026-79806 | A privilege escalation vulnerability in the ClearPass Policy Manager OnGuard Linux agent could allow malicious users… | 7.8 High | Oct 6, 2026 |
| CVE-2026-79805 | An authenticated path traversal vulnerability exists in ClearPass Policy Manager | 9.8 Critical | Oct 6, 2026 |
| CVE-2026-79803 | A command injection vulnerability exists in the API of ClearPass Policy Manager | 8.8 High | Oct 6, 2026 |
| CVE-2026-79802 | A command injection vulnerability exists in the client software of ClearPass Policy Manager | 8.8 High | Oct 6, 2026 |
| CVE-2026-79800 | An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager | 8.8 High | Oct 6, 2026 |
| CVE-2026-79801 | A missing integrity verification vulnerability in the client agent software of HPE Networking ClearPass Policy Manager… | 9.8 Critical | Oct 6, 2026 |
| CVE-2026-79799 | A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated… | 8.8 High | Oct 6, 2026 |
| CVE-2026-79797 | An improper access control vulnerability exists in the Android client application for HPE Networking ClearPass Policy… | 8.8 High | Oct 6, 2026 |
| CVE-2026-79798 | SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a… | 9.9 Critical | Oct 6, 2026 |
| CVE-2026-79796 | Vulnerabilities have been identified in the affected interface of ClearPass Policy Manager that could potentially… | 9.8 Critical | Oct 6, 2026 |
| CVE-2026-79794 | A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager could allow an… | 9.1 Critical | Oct 6, 2026 |
| CVE-2026-76754 | A vulnerability in an affected interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to… | 9.8 Critical | Oct 6, 2026 |
| CVE-2026-76753 | A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager could allow an… | 9.8 Critical | Oct 6, 2026 |
Other Hewlett Packard Enterprise (HPE) products
ArubaOS (AOS) 105
Fabric Composer 98
Unknown product 71
Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central 51
AOS-CX 46
EdgeConnect SD-WAN Gateways 38
Aruba ClearPass Policy Manager 33
EdgeConnect SD-WAN Orchestrator 27
HPE Aruba Networking Wireless Operating System (AOS) 27
Aruba EdgeConnect Enterprise Software 23
Instant On 20
AOS-8 Instant and AOS-10 AP 18