CVE-2026-79806— Authenticated Local Privilege Escalation in ClearPass Policy Manager OnGuard Linux Agent
Quick assessment
Affected
Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
ClearPass Policy Manager OnGuard Linux 代理中存在提权漏洞，该漏洞可能允许 Linux 实例上的恶意用户提升其用户权限。成功利用此漏洞将使恶意用户能够在受影响的 Linux 客户端上提升至 root 权限。
Possible ATT&CK Techniques 1 AI
T1068 · Exploitation for Privilege EscalationAffected Version Matrix 2
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Hewlett Packard Enterprise (HPE) | ClearPass Policy Manager (CPPM) | 6.14.0≤ 6.14.0 |
affected |
6.11.0≤ 6.11.15 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-79806
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Authenticated Local Privilege Escalation in ClearPass Policy Manager OnGuard Linux Agent
Source: CVE Program / CVE List V5
Vulnerability Description
A privilege escalation vulnerability in the ClearPass Policy Manager OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges. A successful exploit allows a malicious user to escalate to root privileges on the affected Linux client.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Hewlett Packard Enterprise (HPE) | ClearPass Policy Manager (CPPM) | 6.14.0 ~ 6.14.0 | - |
|
II. Public POCs for CVE-2026-79806
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-79806
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-79806 (1)
Same Patch Batch · Hewlett Packard Enterprise (HPE) · 2026-10-06 · 37 CVEs total
| CVE-2026-79798 | 9.9 CRITICAL | Authenticated SQL Injection Vulnerabilities in ClearPass Policy Manager Web-Based Manageme |
| CVE-2026-76744 | 9.8 CRITICAL | Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-S |
| CVE-2026-76743 | 9.8 CRITICAL | Authentication Bypass Vulnerability in the Management Interface of AOS-S |
| CVE-2026-76742 | 9.8 CRITICAL | Authentication Bypass in the Web Management Interface of AOS-S |
| CVE-2026-79796 | 9.8 CRITICAL | Authentication Bypass Vulnerabilities in ClearPass Policy Manager |
| CVE-2026-79801 | 9.8 CRITICAL | Unauthenticated Missing Integrity Verification allows Remote Code Execution in ClearPass P |
| CVE-2026-76754 | 9.8 CRITICAL | Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in ClearPass Po |
| CVE-2026-76751 | 9.8 CRITICAL | Missing Integrity Verification in the OnGuard Agent of ClearPass Policy Manager Allows Una |
| CVE-2026-76750 | 9.8 CRITICAL | Unauthenticated Deserialization of Untrusted Data allows Remote Code Execution in the Web |
| CVE-2026-76752 | 9.8 CRITICAL | Authentication Bypass Vulnerabilities in HPE Networking ClearPass Policy Manager Allow Una |
| CVE-2026-76753 | 9.8 CRITICAL | Unauthenticated Format String Vulnerability in HPE Networking ClearPass Policy Manager |
| CVE-2026-79805 | 9.8 CRITICAL | Authenticated Path Traversal Vulnerability Leads to Unauthorized File Access and Modificat |
| CVE-2026-76745 | 9.6 CRITICAL | Unauthenticated Adjacent Memory Corruption Vulnerabilities Leading to Remote Code Executio |
| CVE-2026-76746 | 9.3 CRITICAL | Unauthenticated Adjacent Buffer Overflow Vulnerability Leading to Information Disclosure i |
| CVE-2026-76747 | 9.1 CRITICAL | Unauthenticated Buffer Overflow Vulnerabilities lead to Information Disclosure in AOS-S |
| CVE-2026-79794 | 9.1 CRITICAL | Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management |
| CVE-2026-79797 | 8.8 HIGH | Improper Access Control in HPE Networking ClearPass Android Client Application |
| CVE-2026-79802 | 8.8 HIGH | Command Injection Vulnerability in the ClearPass Policy Manager Client Software |
| CVE-2026-79800 | 8.8 HIGH | Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in ClearPass Pol |
| CVE-2026-79803 | 8.8 HIGH | Authenticated Command Injection Leading to Privilege Escalation in ClearPass Policy Manage |
Showing top 20 of 37 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: ClearPass Policy Manager (CPPM)
-
CVE-2026-79818
Authentication Bypass in the API Interface Allows Unauthoriz -
CVE-2026-79817
Local Disclosure of Sensitive Information in HPE Networking -
CVE-2026-79816
Unauthenticated DOM-Based Cross-Site Scripting (XSS) Vulnera -
CVE-2026-79815
Authenticated Command Injection Vulnerability in the ClearPa -
CVE-2026-79814
Local Arbitrary File Write Leading to Local Privilege Escala
Same vendor: Hewlett Packard Enterprise (HPE)
-
CVE-2026-79818
Authentication Bypass in the API Interface Allows Unauthoriz -
CVE-2026-79817
Local Disclosure of Sensitive Information in HPE Networking -
CVE-2026-79816
Unauthenticated DOM-Based Cross-Site Scripting (XSS) Vulnera -
CVE-2026-79815
Authenticated Command Injection Vulnerability in the ClearPa -
CVE-2026-79814
Local Arbitrary File Write Leading to Local Privilege Escala
V. Comments for CVE-2026-79806
No comments yet