Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-79805 EUVD-2026-93891GHSA-6f23-w4wq-f8hw

Authenticated Path Traversal Vulnerability Leads to Unauthorized File Access and Modification in ClearPass Policy Manager

Published Oct 6, 2026 · Updated Oct 8, 2026 · Assigned by hpe

Description

An authenticated path traversal vulnerability exists in ClearPass Policy Manager. Successful exploitation could allow an attacker to read and modify certain files on the underlying operating system.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) 6.14.0 – ≤ 6.14.0, 6.11.0 – ≤ 6.11.15 —

Advisories 1

References