Critical severity · published Oct 6, 2026
CVE-2026-79805
Authenticated Path Traversal Vulnerability Leads to Unauthorized File Access and Modification in ClearPass Policy Manager
9.8
CVSS
0.4%
EPSS
No
On KEV
Description
An authenticated path traversal vulnerability exists in ClearPass Policy Manager. Successful exploitation could allow an attacker to read and modify certain files on the underlying operating system.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 37% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CP
ClearPass Policy Manager (CPPM) · Hewlett Packard Enterprise (HPE)
6.14.0 through 6.14.0; 6.11.0 through 6.11.15 · source: vendor
Affected product
CP
ClearPass Policy Manager (CPPM)
Hewlett Packard Enterprise (HPE)
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-79805
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-79805
support.hpe.com
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05158en_us&docLocale=en_US
More from ClearPass Policy Manager (CPPM)
9.9
CVE-2026-79798
Authenticated SQL Injection Vulnerabilities in ClearPass Policy Manager Web-Based Management Interface
9.8
CVE-2026-79801
Unauthenticated Missing Integrity Verification allows Remote Code Execution in ClearPass Policy Manager Client Agent
9.8
CVE-2026-79796
Authentication Bypass Vulnerabilities in ClearPass Policy Manager
9.8
CVE-2026-76754
Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in ClearPass Policy Manager
9.8
CVE-2026-76753
Unauthenticated Format String Vulnerability in HPE Networking ClearPass Policy Manager