---
id: CVE-2026-76752
title: >-
  Authentication bypass vulnerabilities exist in the web-based management and
  API interfaces of HPE Networking ClearPass Policy Manager
summary: >-
  Authentication bypass vulnerabilities exist in the web-based management and
  API interfaces of HPE Networking ClearPass Policy Manager. Successful
  exploitation could allow an unauthenticated remote attacker to circumvent
  existing authenti…
severity: critical
cvss: 9.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-287
vendor: Hewlett Packard Enterprise (HPE)
product: ClearPass Policy Manager (CPPM)
affected:
  - clearpass_policy_manager_cppm >= 6.14.0 <= 6.14.0
  - clearpass_policy_manager_cppm >= 6.11.0 <= 6.11.15
published: '2026-10-06'
updated: '2026-10-08'
sourceUpdated: '2026-10-08T04:17:39.270'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-76752'
references:
  - url: >-
      https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05158en_us&docLocale=en_US
    label: security-alert@hpe.com
tags:
  - nvd
  - cve.org
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: total
  timestamp: '2026-10-07T19:16:26.542862Z'
epss: 0.0047
epssPercentile: 0.40515
ingestedAt: '2026-10-06T20:16:42.509Z'
---

## Overview

Authentication bypass vulnerabilities exist in the web-based management and API interfaces of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an unauthenticated remote attacker to circumvent existing authentication controls and gain administrative access to the affected system.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.