CVE-2026-79807

Awaiting Analysis Awaiting Analysis - Queue

BaseFortify

Publication date: 2026-10-06

Last updated on: 2026-10-08

Assigner: Hewlett Packard Enterprise (HPE)

Description

A missing integrity verification vulnerability in the Windows client software for ClearPass Policy Manager could allow malicious users on a local instance to elevate their user privileges. A successful exploit could allow these users to execute attacker-supplied code with elevated privileges on the local system.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-08

Generated

2026-10-19

AI Q&A

2026-10-07

EPSS Evaluated

2026-10-18

NVD

CVE-2026-79807

EUVD

EUVD-2026-93893

Affected Vendors & Products

Vendor	Product	Version / Range
Hewlett	Packard	Enterprise (HPE) ClearPass Policy Manager (CPPM) 6.14.0
Hewlett	Packard	Enterprise (HPE) ClearPass Policy Manager (CPPM) 6.11.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-347	The product does not verify, or incorrectly verifies, the cryptographic signature for data.

Attack-Flow Graph

Executive Summary

This vulnerability is a missing integrity verification issue in the Windows client software for ClearPass Policy Manager. It allows local malicious users to elevate their privileges by exploiting this flaw. Successful exploitation could enable attackers to run malicious code with higher system permissions.

Detection Guidance

This vulnerability involves missing integrity verification in HPE ClearPass Policy Manager client software. Detection requires checking for unauthorized privilege escalation attempts or suspicious code execution on local systems. Monitor system logs for unusual privilege changes and verify integrity of ClearPass client files. No specific commands are provided in the available context.

Impact Analysis

If you use the affected ClearPass Policy Manager Windows client, an attacker with local access could exploit this to gain elevated privileges. This may allow them to install malware, access sensitive data, or perform unauthorized actions on your system.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, which may violate compliance requirements like GDPR or HIPAA. Organizations using the affected software may face regulatory penalties or reputational damage if exploited.

Mitigation Strategies

Apply the latest security patches or updates provided by HPE for ClearPass Policy Manager to address the missing integrity verification issue. Ensure all local users have least-privilege access and monitor for unauthorized privilege escalation attempts.

Hi! I’m here to help you understand CVE-2026-79807. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70