Local Privilege Escalation Vulnerability in ClearPass Client Software by HPE
CVE-2026-79813

6.7MEDIUM

Key Information:

Vendor

HP (HP)

Status
Clearpass Policy Manager (cppm)
Vendor
CVE Published:
6 October 2026

What is CVE-2026-79813?

A vulnerability exists in the ClearPass client software that allows a local, low-privileged user to elevate their privileges to execute commands on the affected system, provided specific external conditions are satisfied. This can lead to potential unauthorized access and manipulation of the system by the exploiting user.

Affected Version(s)

ClearPass Policy Manager (CPPM) 6.14.0

ClearPass Policy Manager (CPPM) 6.14.0

ClearPass Policy Manager (CPPM) 6.11.0 <= 6.11.15

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Internal security research (HPE Networking).
.