CVE-2026-76753: Hewlett Packard Enterprise HPE Clearpass Policy Manager Cppm

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to corrupt process memory. Successful exploitation could allow an attacker to execute arbitrary code.

Affected products

• Hewlett Packard Enterprise HPE Clearpass Policy Manager Cppm: from 6.14.0, up to and including 6.14.0; from 6.11.0, up to and including 6.11.15

Published 2026-10-06. Last modified 2026-10-08.