Arbitrary File Write Vulnerability in ClearPass Policy Manager by HPE
CVE-2026-79814

6.7MEDIUM

Key Information:

Vendor

HP (HP)

Status
Clearpass Policy Manager (cppm)
Vendor
CVE Published:
6 October 2026

What is CVE-2026-79814?

An arbitrary file write vulnerability exists in the ClearPass Policy Manager OnGuard agent, enabling local users to potentially elevate their privileges. This issue arises when specific conditions, which are outside the attacker's control, are satisfied. If successfully exploited, it allows local attackers to execute arbitrary code with higher privileges on the affected system, posing a significant security risk.

Affected Version(s)

ClearPass Policy Manager (CPPM) 6.14.0

ClearPass Policy Manager (CPPM) 6.14.0

ClearPass Policy Manager (CPPM) 6.11.0 <= 6.11.15

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Internal security research (HPE Networking).
.