CVE-2026-79803 — Authenticated Command Injection Leading to Privilege Escalation in ClearPass Policy Manager API

CVE-2026-79803

Authenticated Command Injection Leading to Privilege Escalation in ClearPass Policy Manager API PUBLISHED

Description (CNA)

A command injection vulnerability exists in the API of ClearPass Policy Manager. Successful exploitation could allow an authenticated remote attacker to escalate privileges and gain administrative control of the affected system.

Affected (CNA)

Vendor / product	Versions
Hewlett Packard Enterprise (HPE) / ClearPass Policy Manager (CPPM)	affected 6.14.0 through 6.14.0; affected 6.11.0 through 6.11.15

CWE

No CWE identifiers supplied.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05158en_us&docLocale=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.