Skip to content
OpenAdvisories
Medium · 6.7 CVE-2026-79814 EUVD-2026-93900GHSA-hj73-xc58-6r33

Local Arbitrary File Write Leading to Local Privilege Escalation in ClearPass Policy Manager OnGuard Agent

Published Oct 6, 2026 · Updated Oct 8, 2026 · Assigned by hpe

Description

An arbitrary file write vulnerability in the ClearPass Policy Manager OnGuard agent could allow malicious users on a local instance to elevate their user privileges if certain preconditions outside of the attacker's control are met. Successful exploitation could allow a local attacker to execute arbitrary code with elevated privileges on the affected system.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) 6.14.0 – ≤ 6.14.0, 6.11.0 – ≤ 6.11.15 —

Advisories 1

References