Privilege Escalation Vulnerability in ClearPass OnGuard by HPE
CVE-2026-73788

6.5MEDIUM

Key Information:

Vendor

HP (HP)

Status
Clearpass Policy Manager (cppm)
Vendor
CVE Published:
9 September 2026

What is CVE-2026-73788?

A vulnerability exists in the ClearPass OnGuard agent that can potentially allow an authenticated remote attacker to escalate their privileges. This enables the attacker to gain unauthorized root access to the system, which could lead to unapproved actions and operations on the compromised system. It is critical for users of ClearPass OnGuard to implement necessary security measures and apply relevant patches to safeguard against this risk.

Affected Version(s)

ClearPass Policy Manager (CPPM) 6.12.0 <= 6.12.8

ClearPass Policy Manager (CPPM) 6.12.0 <= 6.12.8

ClearPass Policy Manager (CPPM) 6.11.0 <= 6.11.14

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

n3k
.