CVE-2026-73769 — Authenticated Remote Code Execution in CPPM Web Interface

CVE-2026-73769

Authenticated Remote Code Execution in CPPM Web Interface PUBLISHED

Description (CNA)

A vulnerability in the web-based management interface of vulnerable CPPM systems could allow an authenticated remote attacker to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

Affected (CNA)

Vendor / product	Versions
Hewlett Packard Enterprise (HPE) / ClearPass Policy Manager (CPPM)	affected 6.12.0 through 6.12.8; affected 6.11.0 through 6.11.14

CWE

No CWE identifiers supplied.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05130en_us&docLocale=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.