---
id: CVE-2026-79796
title: >-
  Vulnerabilities have been identified in the affected interface of ClearPass
  Policy Manager that could potentially allow an unauthenticated remote attacker
  to circumvent existing authentication controls
summary: >-
  Vulnerabilities have been identified in the affected interface of ClearPass
  Policy Manager that could potentially allow an unauthenticated remote attacker
  to circumvent existing authentication controls. Successful exploitation could
  allo…
severity: critical
cvss: 9.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-287
vendor: Hewlett Packard Enterprise (HPE)
product: ClearPass Policy Manager (CPPM)
affected:
  - clearpass_policy_manager_cppm >= 6.14.0 <= 6.14.0
  - clearpass_policy_manager_cppm >= 6.11.0 <= 6.11.15
published: '2026-10-06'
updated: '2026-10-08'
sourceUpdated: '2026-10-08T04:17:42.980'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-79796'
references:
  - url: >-
      https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05158en_us&docLocale=en_US
    label: security-alert@hpe.com
tags:
  - nvd
  - cve.org
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: total
  timestamp: '2026-10-07T14:14:25.741113Z'
epss: 0.00466
epssPercentile: 0.40159
ingestedAt: '2026-10-06T20:16:42.507Z'
---

## Overview

Vulnerabilities have been identified in the affected interface of ClearPass Policy Manager that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain unauthorized access to the affected system.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.