CVE-2026-79800

Awaiting Analysis Awaiting Analysis - Queue

BaseFortify

Publication date: 2026-10-06

Last updated on: 2026-10-08

Assigner: Hewlett Packard Enterprise (HPE)

Description

An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager. Successful exploitation could allow a low-privileged authenticated remote attacker to execute arbitrary code with elevated privileges on the underlying operating system.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-08

Generated

2026-10-19

AI Q&A

2026-10-07

EPSS Evaluated

2026-10-18

NVD

CVE-2026-79800

EUVD

EUVD-2026-93887

Affected Vendors & Products

Vendor	Product	Version / Range
Hewlett	Packard	Enterprise (HPE) ClearPass Policy Manager (CPPM) 6.14.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-22	The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

Executive Summary

This is an authenticated path traversal vulnerability in the command line interface of ClearPass Policy Manager. It allows a low-privileged authenticated remote attacker to execute arbitrary code with elevated privileges on the underlying operating system.

Detection Guidance

Since this is an authenticated path traversal vulnerability in ClearPass Policy Manager, detection requires checking for unusual file access or command execution patterns. Monitor logs for unauthorized path traversal attempts in CLI commands. Look for sequences like '../' or '..\' in user inputs or system logs. Verify if low-privileged users can access restricted directories or execute unexpected commands.

Impact Analysis

An attacker could gain control of the system, steal sensitive data, disrupt services, or perform unauthorized actions. Systems running ClearPass Policy Manager are at risk if not patched.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR and HIPAA requirements for data protection and access control. Non-compliance may result in legal penalties.

Mitigation Strategies

Apply vendor-provided patches or updates for ClearPass Policy Manager immediately. Restrict remote access to the CLI and ensure only trusted users have authenticated access. Monitor network traffic for unusual command execution patterns.

Hi! I’m here to help you understand CVE-2026-79800. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70