CVE-2026-79803

HIGHCVSS 8.8

Description

A command injection vulnerability exists in the API of ClearPass Policy Manager. Successful exploitation could allow an authenticated remote attacker to escalate privileges and gain administrative control of the affected system.

Timeline

Published:October 6th, 2026 8:17 PM

Last modified:October 8th, 2026 4:17 AM

CVSS Scoring

CVSS v3: 8.8 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-77

References & Reports

Advisories, patches, and third-party reports

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05158en_us&docLocale=en_US

Source: NIST NVD · Data may lag official sources by up to one minute