CVE-2026-79813

Awaiting Analysis Awaiting Analysis - Queue

BaseFortify

Publication date: 2026-10-06

Last updated on: 2026-10-08

Assigner: Hewlett Packard Enterprise (HPE)

Description

A local privilege escalation vulnerability exists in the ClearPass client software. Successful exploitation could allow a low-privileged local user to execute commands with elevated privileges on the affected system, if certain conditions outside of the attacker's control are met.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-08

Generated

2026-10-19

AI Q&A

2026-10-07

EPSS Evaluated

2026-10-18

NVD

CVE-2026-79813

EUVD

EUVD-2026-93899

Affected Vendors & Products

Vendor	Product	Version / Range
Hewlett	Packard	Enterprise (HPE) ClearPass Policy Manager (CPPM) 6.14.0
Hewlett	Packard	Enterprise (HPE) ClearPass Policy Manager (CPPM) 6.11.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-269	The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

Executive Summary

This is a local privilege escalation vulnerability in HPE ClearPass client software. It allows a low-privileged local user to run commands with higher privileges if specific external conditions are met.

Detection Guidance

Detection methods or specific commands for this vulnerability are not provided in the available CVE context. Manual inspection of ClearPass client software versions and local privilege checks may be required.

Impact Analysis

If exploited, an attacker could gain elevated access on the system, potentially leading to unauthorized control or data manipulation. This requires local access and specific conditions to be met.

Compliance Impact

This vulnerability could potentially impact compliance with standards like GDPR and HIPAA by allowing unauthorized privilege escalation on systems handling sensitive data. Elevated privileges might enable access to protected information, violating confidentiality requirements under these regulations.

Mitigation Strategies

Apply the latest security patches or updates provided by HPE for the ClearPass client software. Ensure the ClearPass Policy Manager is updated to the latest version to address the local privilege escalation vulnerability.

Hi! I’m here to help you understand CVE-2026-79813. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70