CVE-2026-76750 — Unauthenticated Deserialization of Untrusted Data allows Remote Code Execution in the Web Interface of HPE Networking…

CVE-2026-76750

Unauthenticated Deserialization of Untrusted Data allows Remote Code Execution in the Web Interface of HPE Networking ClearPass Policy Manager PUBLISHED

Description (CNA)

Deserialization of untrusted data vulnerabilities exist in the web interface of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary code on the affected system.

Affected (CNA)

Vendor / product	Versions
Hewlett Packard Enterprise (HPE) / ClearPass Policy Manager (CPPM)	affected 6.14.0 through 6.14.0; affected 6.11.0 through 6.11.15

CWE

No CWE identifiers supplied.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05158en_us&docLocale=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.