# CVE-2026-79796: Aruba ClearPass Policy Manager authentication bypass

Source: https://junglewise.ai/threats/cve-2026-79796-vulnerabilities-have-been-identified-in-the-affected-interface-of  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-06. Updated: 2026-10-06  
License: CC BY 4.0 with a link back

CVE-2026-79796 · Severity: critical · CVSS 9.8 · Published 2026-10-06

ClearPass Policy Manager is an access control and policy management platform used to authenticate and authorize users and devices on corporate networks. A critical vulnerability allows unauthenticated remote attackers to bypass authentication controls and gain unauthorized access to the system without valid credentials, potentially exposing sensitive network access policies and user data.

Technologies: [Aruba ClearPass Policy Manager](https://junglewise.ai/threats/technologies/aruba-clearpass-policy-manager). Vendors: [Aruba](https://junglewise.ai/threats/vendors/aruba).

## Quick answers

**Is CVE-2026-79796 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-79796 being exploited in the wild.

**How severe is CVE-2026-79796?** Critical severity, with a CVSS score of 9.8, published 6 October 2026.

**Which products and versions are affected?** Aruba ClearPass Policy Manager.

**Is there a fix for CVE-2026-79796?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-79796 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-79796?** Check whether you run Aruba ClearPass Policy Manager. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

An authentication bypass vulnerability exists in an affected interface of ClearPass Policy Manager that permits unauthenticated remote attackers to circumvent authentication controls via network access. Successful exploitation grants unauthorized access to the system without requiring valid credentials, potentially compromising the entire access control infrastructure.

## Affected products

- Aruba ClearPass Policy Manager

## Timeline

- 2026-10-06: disclosed

## References

- [https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05158en_us&docLocale=en_US](https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05158en_us&docLocale=en_US)

## Related threats

- [Aruba ClearPass Policy Manager Windows client integrity verification bypass](https://junglewise.ai/threats/cve-2026-79807-a-missing-integrity-verification-vulnerability-in-the-windows)
- [Aruba ClearPass Policy Manager stored XSS in management interface](https://junglewise.ai/threats/cve-2026-79799-a-vulnerability-in-the-web-based-management-interface-of)
- [Aruba ClearPass Policy Manager SQL injection](https://junglewise.ai/threats/cve-2026-76754-a-vulnerability-in-an-affected-interface-of-clearpass-policy)
- [Aruba ClearPass Policy Manager OnGuard agent code execution](https://junglewise.ai/threats/cve-2026-76751-a-missing-integrity-verification-vulnerability-exists-in-the)