API Interface Vulnerability in ClearPass Policy Manager by HPE
CVE-2026-79818

5.3MEDIUM

Key Information:

Vendor

HP (HP)

Status
Clearpass Policy Manager (cppm)
Vendor
CVE Published:
6 October 2026

What is CVE-2026-79818?

A significant vulnerability exists in the API interface of ClearPass Policy Manager developed by HPE, which can be exploited by unauthenticated remote attackers. This flaw permits attackers to bypass existing authentication mechanisms, granting unauthorized access to potentially sensitive data within the system. Organizations using the affected versions should remediate this issue to prevent data exposure and reinforce their security posture.

Affected Version(s)

ClearPass Policy Manager (CPPM) 6.14.0

ClearPass Policy Manager (CPPM) 6.14.0

ClearPass Policy Manager (CPPM) 6.11.0 <= 6.11.15

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Internal security research (HPE Networking).
.