CVE-2026-79813— Local Privilege Escalation in ClearPass Client Software
Quick assessment
Affected
Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
ClearPass 客户端软件中存在本地权限提升漏洞。如果满足某些攻击者无法控制的外部条件，成功利用该漏洞可使低权限的本地用户在受影响系统上以 elevated（提升）权限执行命令。
Possible ATT&CK Techniques 1 AI
T1068 · Exploitation for Privilege EscalationAffected Version Matrix 2
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Hewlett Packard Enterprise (HPE) | ClearPass Policy Manager (CPPM) | 6.14.0≤ 6.14.0 |
affected |
6.11.0≤ 6.11.15 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-79813
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Local Privilege Escalation in ClearPass Client Software
Source: CVE Program / CVE List V5
Vulnerability Description
A local privilege escalation vulnerability exists in the ClearPass client software. Successful exploitation could allow a low-privileged local user to execute commands with elevated privileges on the affected system, if certain conditions outside of the attacker's control are met.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Hewlett Packard Enterprise (HPE) | ClearPass Policy Manager (CPPM) | 6.14.0 ~ 6.14.0 | - |
|
II. Public POCs for CVE-2026-79813
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-79813
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-79813 (1)
Same Patch Batch · Hewlett Packard Enterprise (HPE) · 2026-10-06 · 37 CVEs total
| CVE-2026-79798 | 9.9 CRITICAL | Authenticated SQL Injection Vulnerabilities in ClearPass Policy Manager Web-Based Manageme |
| CVE-2026-76744 | 9.8 CRITICAL | Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-S |
| CVE-2026-76743 | 9.8 CRITICAL | Authentication Bypass Vulnerability in the Management Interface of AOS-S |
| CVE-2026-76742 | 9.8 CRITICAL | Authentication Bypass in the Web Management Interface of AOS-S |
| CVE-2026-79796 | 9.8 CRITICAL | Authentication Bypass Vulnerabilities in ClearPass Policy Manager |
| CVE-2026-79801 | 9.8 CRITICAL | Unauthenticated Missing Integrity Verification allows Remote Code Execution in ClearPass P |
| CVE-2026-76754 | 9.8 CRITICAL | Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in ClearPass Po |
| CVE-2026-76751 | 9.8 CRITICAL | Missing Integrity Verification in the OnGuard Agent of ClearPass Policy Manager Allows Una |
| CVE-2026-76750 | 9.8 CRITICAL | Unauthenticated Deserialization of Untrusted Data allows Remote Code Execution in the Web |
| CVE-2026-76752 | 9.8 CRITICAL | Authentication Bypass Vulnerabilities in HPE Networking ClearPass Policy Manager Allow Una |
| CVE-2026-76753 | 9.8 CRITICAL | Unauthenticated Format String Vulnerability in HPE Networking ClearPass Policy Manager |
| CVE-2026-79805 | 9.8 CRITICAL | Authenticated Path Traversal Vulnerability Leads to Unauthorized File Access and Modificat |
| CVE-2026-76745 | 9.6 CRITICAL | Unauthenticated Adjacent Memory Corruption Vulnerabilities Leading to Remote Code Executio |
| CVE-2026-76746 | 9.3 CRITICAL | Unauthenticated Adjacent Buffer Overflow Vulnerability Leading to Information Disclosure i |
| CVE-2026-76747 | 9.1 CRITICAL | Unauthenticated Buffer Overflow Vulnerabilities lead to Information Disclosure in AOS-S |
| CVE-2026-79794 | 9.1 CRITICAL | Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management |
| CVE-2026-79797 | 8.8 HIGH | Improper Access Control in HPE Networking ClearPass Android Client Application |
| CVE-2026-79802 | 8.8 HIGH | Command Injection Vulnerability in the ClearPass Policy Manager Client Software |
| CVE-2026-79800 | 8.8 HIGH | Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in ClearPass Pol |
| CVE-2026-79803 | 8.8 HIGH | Authenticated Command Injection Leading to Privilege Escalation in ClearPass Policy Manage |
Showing top 20 of 37 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: ClearPass Policy Manager (CPPM)
-
CVE-2026-79818
Authentication Bypass in the API Interface Allows Unauthoriz -
CVE-2026-79817
Local Disclosure of Sensitive Information in HPE Networking -
CVE-2026-79816
Unauthenticated DOM-Based Cross-Site Scripting (XSS) Vulnera -
CVE-2026-79815
Authenticated Command Injection Vulnerability in the ClearPa -
CVE-2026-79814
Local Arbitrary File Write Leading to Local Privilege Escala
Same vendor: Hewlett Packard Enterprise (HPE)
-
CVE-2026-79818
Authentication Bypass in the API Interface Allows Unauthoriz -
CVE-2026-79817
Local Disclosure of Sensitive Information in HPE Networking -
CVE-2026-79816
Unauthenticated DOM-Based Cross-Site Scripting (XSS) Vulnera -
CVE-2026-79815
Authenticated Command Injection Vulnerability in the ClearPa -
CVE-2026-79814
Local Arbitrary File Write Leading to Local Privilege Escala
V. Comments for CVE-2026-79813
No comments yet