CVE-2026-79814

Summary

An arbitrary file write vulnerability in the ClearPass Policy Manager OnGuard agent could allow malicious users on a local instance to elevate their user privileges if certain preconditions outside of the attacker's control are met. Successful exploitation could allow a local attacker to execute arbitrary code with elevated privileges on the affected system.

Affected Software

VendorProductVersion RangeStatus
Hewlett Packard Enterprise (HPE)ClearPass Policy Manager (CPPM)6.14.0 <= 6.14.0affected
Hewlett Packard Enterprise (HPE)ClearPass Policy Manager (CPPM)6.11.0 <= 6.11.15affected

Weaknesses

References