Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-76752 EUVD-2026-93879GHSA-m7g4-2j92-rmph

Authentication Bypass Vulnerabilities in HPE Networking ClearPass Policy Manager Allow Unauthorized Administrative Access

Published Oct 6, 2026 · Updated Oct 8, 2026 · Assigned by hpe

Description

Authentication bypass vulnerabilities exist in the web-based management and API interfaces of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an unauthenticated remote attacker to circumvent existing authentication controls and gain administrative access to the affected system.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) 6.14.0 – ≤ 6.14.0, 6.11.0 – ≤ 6.11.15 —

Advisories 1

References