CVE-2026-79800 — Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in ClearPass Policy Manager

CVE-2026-79800

Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in ClearPass Policy Manager PUBLISHED

Description (CNA)

An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager. Successful exploitation could allow a low-privileged authenticated remote attacker to execute arbitrary code with elevated privileges on the underlying operating system.

Affected (CNA)

Vendor / product	Versions
Hewlett Packard Enterprise (HPE) / ClearPass Policy Manager (CPPM)	affected 6.14.0 through 6.14.0

CWE

No CWE identifiers supplied.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05158en_us&docLocale=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.