CVE-2026-79815

Awaiting Analysis Awaiting Analysis - Queue

BaseFortify

Publication date: 2026-10-06

Last updated on: 2026-10-07

Assigner: Hewlett Packard Enterprise (HPE)

Description

A command injection vulnerability in the OnGuard agent of ClearPass Policy Manager could allow an authenticated remote attacker to inject arbitrary commands. Successful exploitation could allow an attacker to execute commands with elevated privileges on the affected Windows endpoint.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-07

Generated

2026-10-19

AI Q&A

2026-10-07

EPSS Evaluated

2026-10-18

NVD

CVE-2026-79815

EUVD

EUVD-2026-93901

Affected Vendors & Products

Vendor	Product	Version / Range
Hewlett	Packard	Enterprise (HPE) ClearPass Policy Manager (CPPM) 6.14.0
Hewlett	Packard	Enterprise (HPE) ClearPass Policy Manager (CPPM) 6.11.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-77	The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

Attack-Flow Graph

Executive Summary

This is a command injection vulnerability in the OnGuard agent of ClearPass Policy Manager. An authenticated remote attacker can inject arbitrary commands, potentially executing them with elevated privileges on the affected Windows endpoint.

Detection Guidance

Since this is a command injection vulnerability in the OnGuard agent of ClearPass Policy Manager, detection requires checking for unauthorized command execution on affected Windows endpoints. Monitor for unusual processes, network connections, or file modifications originating from the OnGuard agent. Review logs for suspicious commands or unexpected privilege escalations.

Impact Analysis

An attacker could exploit this to run malicious commands on your system with higher privileges, potentially leading to unauthorized access, data theft, or system compromise.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, which may violate compliance requirements under GDPR, HIPAA, or other regulations due to insufficient security controls.

Mitigation Strategies

Apply the latest security patches from HPE for ClearPass Policy Manager to address the command injection vulnerability in the OnGuard agent. Ensure the OnGuard agent is updated to a version that fixes this issue. Restrict network access to the OnGuard agent interface to trusted sources only.

Hi! I’m here to help you understand CVE-2026-79815. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70