CVE-2026-23599
Received
Received - Intake
Local Privilege Escalation in HPE Aruba ClearPass OnGuard Linux
Publication date: 2026-02-18
Last updated on: 2026-02-18
Assigner: Hewlett Packard Enterprise (HPE)
Description
Description
A local privilege-escalation vulnerability has been discovered in the HPE Aruba Networking ClearPass OnGuard Software for Linux. Successful exploitation of this vulnerability could allow a local attacker to achieve arbitrary code execution with root privileges.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| hpe | aruba_networking_clearpass_onguard_software | *-* |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-269 | The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor. |