CVE-2026-76751

Awaiting Analysis Awaiting Analysis - Queue

BaseFortify

Publication date: 2026-10-06

Last updated on: 2026-10-08

Assigner: Hewlett Packard Enterprise (HPE)

Description

A missing integrity verification vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could allow an unauthenticated, remote attacker to execute arbitrary code on the affected endpoint with the elevated privileges of the agent.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-08

Generated

2026-10-19

AI Q&A

2026-10-07

EPSS Evaluated

2026-10-18

NVD

CVE-2026-76751

EUVD

EUVD-2026-93878

Affected Vendors & Products

Vendor	Product	Version / Range
Hewlett	Packard	Enterprise (HPE) ClearPass Policy Manager (CPPM) 6.14.0
Hewlett	Packard	Enterprise (HPE) ClearPass Policy Manager (CPPM) 6.11.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-353	The product uses a transmission protocol that does not include a mechanism for verifying the integrity of the data during transmission, such as a checksum.

Attack-Flow Graph

Executive Summary

This vulnerability is a missing integrity check in the OnGuard agent of ClearPass Policy Manager. It allows an unauthenticated remote attacker to execute arbitrary code on the affected system with the same high privileges as the agent itself.

Detection Guidance

This vulnerability involves a missing integrity check in the OnGuard agent of ClearPass Policy Manager, allowing remote code execution. Detection requires verifying the integrity of the OnGuard agent files and network traffic inspection for unauthorized modifications or suspicious activity.

Impact Analysis

An attacker could take full control of the affected endpoint, install malware, steal data, or disrupt operations. Since the agent runs with elevated privileges, the impact is severe and could affect the entire system.

Compliance Impact

This vulnerability could lead to unauthorized access and data breaches, violating GDPR and HIPAA requirements for data protection and integrity. Organizations may face legal penalties and reputational damage.

Mitigation Strategies

Apply the latest security patches or updates provided by HPE for ClearPass Policy Manager to address the missing integrity verification issue. Monitor HPE's security advisories for patches and follow their recommended mitigation steps.

Hi! I’m here to help you understand CVE-2026-76751. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70