CVE-2026-79809

Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)

Medium priority: severe, but no known exploitation

An unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy Manager. Successful exploitation of this vulnerability allows an unauthenticated remote attacker to influence authorization decisions and be assigned an unintended role.

In the news

• Múltiples vulnerabilidades en productos de HPE · INCIBE-CERT