CVE-2026-79814: Hewlett Packard Enterprise HPE Clearpass Policy Manager Cppm

Medium severity, CVSS 6.7. EPSS: 0.1% chance of exploitation in the next 30 days.

An arbitrary file write vulnerability in the ClearPass Policy Manager OnGuard agent could allow malicious users on a local instance to elevate their user privileges if certain preconditions outside of the attacker's control are met. Successful exploitation could allow a local attacker to execute arbitrary code with elevated privileges on the affected system.

Affected products

• Hewlett Packard Enterprise HPE Clearpass Policy Manager Cppm: from 6.14.0, up to and including 6.14.0; from 6.11.0, up to and including 6.11.15

Published 2026-10-06. Last modified 2026-10-08.