CVE-2026-79797

Awaiting Analysis Awaiting Analysis - Queue

BaseFortify

Publication date: 2026-10-06

Last updated on: 2026-10-08

Assigner: Hewlett Packard Enterprise (HPE)

Description

An improper access control vulnerability exists in the Android client application for HPE Networking ClearPass Policy Manager, where application functionality may be invoked by untrusted sources. Successful exploitation could allow an unauthenticated remote attacker, with user interaction, to obtain sensitive information from the affected user.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-08

Generated

2026-10-19

AI Q&A

2026-10-07

EPSS Evaluated

2026-10-18

NVD

CVE-2026-79797

EUVD

EUVD-2026-93884

Affected Vendors & Products

Vendor	Product	Version / Range
Hewlett	Packard	Enterprise (HPE) ClearPass Policy Manager (CPPM) 6.14.0
Hewlett	Packard	Enterprise (HPE) ClearPass Policy Manager (CPPM) 6.11.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This vulnerability is an improper access control issue in the Android client app for HPE Networking ClearPass Policy Manager. It allows untrusted sources to invoke application functions. An unauthenticated remote attacker could exploit this with user interaction to steal sensitive data from affected users.

Detection Guidance

This vulnerability involves improper access control in the Android client application for HPE Networking ClearPass Policy Manager. Detection requires checking for unauthorized application invocations or sensitive data exposure. Monitor network traffic for unusual requests to the CPPM server and inspect Android app logs for unexpected function calls. No specific commands are provided in the available context.

Impact Analysis

If you use the affected HPE ClearPass Policy Manager Android app, an attacker might access your sensitive information without your knowledge. This could include personal data, credentials, or other confidential details stored or processed by the app.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, potentially violating GDPR (data protection) and HIPAA (health information privacy) requirements. Organizations using the affected app may face compliance breaches, legal penalties, and reputational damage.

Mitigation Strategies

Apply the latest security patches or updates provided by HPE for ClearPass Policy Manager to address the improper access control vulnerability. Ensure the Android client application is updated to the patched version.

Hi! I’m here to help you understand CVE-2026-79797. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70