{"schema_version":1,"title":"Hpe ClearPass Policy Manager vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 12 vulnerabilities in Hpe ClearPass Policy Manager: 0 in the last 7 days and 12 in the last 90 days, 4 of them critical and 0 exploited in the wild. The most recent, CVE-2026-79818, was published on 6 October 2026. Nothing in the last four weeks, down from 12 vulnerabilities in the four before. 0 critical against 4.","url":"https://junglewise.ai/threats/technologies/hpe-clearpass-policy-manager","json_url":"https://junglewise.ai/threats/technologies/hpe-clearpass-policy-manager.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/hpe-clearpass-policy-manager","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":true,"counts":{"high":4,"all_time":12,"critical":4,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":12,"last_365_days":12},"latest":[{"cve":"CVE-2026-79818","cvss":5.3,"slug":"cve-2026-79818-a-vulnerability-in-an-api-interface-of-clearpass-policy-manager","title":"HPE ClearPass Policy Manager API authentication bypass","severity":"medium","exploited":false,"published_at":"2026-10-06T20:17:33.55+00:00","url":"https://junglewise.ai/threats/cve-2026-79818-a-vulnerability-in-an-api-interface-of-clearpass-policy-manager"},{"cve":"CVE-2026-79817","cvss":5.5,"slug":"cve-2026-79817-a-sensitive-information-disclosure-vulnerability-exists-in-the","title":"HPE ClearPass Policy Manager client information disclosure","severity":"medium","exploited":false,"published_at":"2026-10-06T20:17:33.43+00:00","url":"https://junglewise.ai/threats/cve-2026-79817-a-sensitive-information-disclosure-vulnerability-exists-in-the"},{"cve":"CVE-2026-79816","cvss":6.3,"slug":"cve-2026-79816-a-vulnerability-in-a-client-interface-of-hpe-networking-clearpass","title":"HPE Networking ClearPass Policy Manager DOM-based XSS in client interface","severity":"medium","exploited":false,"published_at":"2026-10-06T20:17:33.317+00:00","url":"https://junglewise.ai/threats/cve-2026-79816-a-vulnerability-in-a-client-interface-of-hpe-networking-clearpass"},{"cve":"CVE-2026-79812","cvss":6.1,"slug":"cve-2026-79812-a-denial-of-service-vulnerability-exists-in-the-onguard-agent-of","title":"HPE ClearPass Policy Manager OnGuard agent denial of service","severity":"medium","exploited":false,"published_at":"2026-10-06T20:17:32.837+00:00","url":"https://junglewise.ai/threats/cve-2026-79812-a-denial-of-service-vulnerability-exists-in-the-onguard-agent-of"},{"cve":"CVE-2026-79811","cvss":7.2,"slug":"cve-2026-79811-a-sql-injection-vulnerability-in-the-api-of-clearpass-policy","title":"HPE ClearPass Policy Manager API SQL injection","severity":"high","exploited":false,"published_at":"2026-10-06T20:17:32.72+00:00","url":"https://junglewise.ai/threats/cve-2026-79811-a-sql-injection-vulnerability-in-the-api-of-clearpass-policy"},{"cve":"CVE-2026-79809","cvss":7.3,"slug":"cve-2026-79809-an-unauthenticated-path-traversal-vulnerability-exists-in-an-api","title":"HPE ClearPass Policy Manager path traversal in API endpoint","severity":"high","exploited":false,"published_at":"2026-10-06T20:17:32.483+00:00","url":"https://junglewise.ai/threats/cve-2026-79809-an-unauthenticated-path-traversal-vulnerability-exists-in-an-api"},{"cve":"CVE-2026-79805","cvss":9.8,"slug":"cve-2026-79805-an-authenticated-path-traversal-vulnerability-exists-in-clearpass","title":"HPE ClearPass Policy Manager authenticated path traversal","severity":"critical","exploited":false,"published_at":"2026-10-06T20:17:32.013+00:00","url":"https://junglewise.ai/threats/cve-2026-79805-an-authenticated-path-traversal-vulnerability-exists-in-clearpass"},{"cve":"CVE-2026-79803","cvss":8.8,"slug":"cve-2026-79803-a-command-injection-vulnerability-exists-in-the-api-of-clearpass","title":"HPE ClearPass Policy Manager API command injection","severity":"high","exploited":false,"published_at":"2026-10-06T20:17:31.9+00:00","url":"https://junglewise.ai/threats/cve-2026-79803-a-command-injection-vulnerability-exists-in-the-api-of-clearpass"},{"cve":"CVE-2026-79800","cvss":8.8,"slug":"cve-2026-79800-an-authenticated-path-traversal-vulnerability-exists-in-the","title":"HPE ClearPass Policy Manager path traversal in CLI","severity":"high","exploited":false,"published_at":"2026-10-06T20:17:31.553+00:00","url":"https://junglewise.ai/threats/cve-2026-79800-an-authenticated-path-traversal-vulnerability-exists-in-the"},{"cve":"CVE-2026-76753","cvss":9.8,"slug":"cve-2026-76753-a-format-string-vulnerability-in-an-affected-service-interface-of","title":"HPE ClearPass Policy Manager format string vulnerability","severity":"critical","exploited":false,"published_at":"2026-10-06T20:17:30.74+00:00","url":"https://junglewise.ai/threats/cve-2026-76753-a-format-string-vulnerability-in-an-affected-service-interface-of"},{"cve":"CVE-2026-76752","cvss":9.8,"slug":"cve-2026-76752-authentication-bypass-vulnerabilities-exist-in-the-web-based","title":"HPE ClearPass Policy Manager authentication bypass","severity":"critical","exploited":false,"published_at":"2026-10-06T20:17:30.623+00:00","url":"https://junglewise.ai/threats/cve-2026-76752-authentication-bypass-vulnerabilities-exist-in-the-web-based"},{"cve":"CVE-2026-76750","cvss":9.8,"slug":"cve-2026-76750-deserialization-of-untrusted-data-vulnerabilities-exist-in-the","title":"HPE ClearPass Policy Manager deserialization of untrusted data","severity":"critical","exploited":false,"published_at":"2026-10-06T20:17:30.397+00:00","url":"https://junglewise.ai/threats/cve-2026-76750-deserialization-of-untrusted-data-vulnerabilities-exist-in-the"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":4,"exploited":0,"vulnerabilities":12},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Hpe Networking Fabric Composer","slug":"networking-fabric-composer","vulnerabilities":92,"url":"https://junglewise.ai/threats/technologies/networking-fabric-composer"},{"name":"Hpe EdgeConnect SD-WAN Gateway","slug":"edgeconnect-sd-wan-gateway","vulnerabilities":16,"url":"https://junglewise.ai/threats/technologies/edgeconnect-sd-wan-gateway"},{"name":"Hpe Analytics and Location Engine","slug":"analytics-and-location-engine","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/analytics-and-location-engine"},{"name":"Hpe Networking Instant On","slug":"networking-instant-on","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/networking-instant-on"},{"name":"Hpe Arubaos-Cx","slug":"arubaos-cx","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/arubaos-cx"},{"name":"Hpe AOS-S","slug":"hpe-aos-s","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/hpe-aos-s"},{"name":"Hpe <UNKNOWN>","slug":"hpe-unknown","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/hpe-unknown"},{"name":"Hpe Networking Instant ON APs","slug":"networking-instant-on-aps","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/networking-instant-on-aps"},{"name":"Hpe Networking VIA","slug":"networking-via","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/networking-via"},{"name":"Hpe EdgeConnect SD-WAN Orchestrator","slug":"hpe-edgeconnect-sd-wan-orchestrator","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/hpe-edgeconnect-sd-wan-orchestrator"},{"name":"Hpe OneView","slug":"hpe-oneview","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/hpe-oneview"}],"technology":{"hub":true,"name":"Hpe ClearPass Policy Manager","slug":"hpe-clearpass-policy-manager","vendor":{"hub":true,"name":"Hpe","slug":"hpe","url":"https://junglewise.ai/threats/vendors/hpe"},"aliases":[],"category":"appliance","description":"Network access control and policy management appliance for HPE/Aruba environments.","url":"https://junglewise.ai/threats/technologies/hpe-clearpass-policy-manager"},"most_severe":[{"cve":"CVE-2026-79805","cvss":9.8,"slug":"cve-2026-79805-an-authenticated-path-traversal-vulnerability-exists-in-clearpass","title":"HPE ClearPass Policy Manager authenticated path traversal","severity":"critical","exploited":false,"published_at":"2026-10-06T20:17:32.013+00:00","url":"https://junglewise.ai/threats/cve-2026-79805-an-authenticated-path-traversal-vulnerability-exists-in-clearpass"},{"cve":"CVE-2026-76753","cvss":9.8,"slug":"cve-2026-76753-a-format-string-vulnerability-in-an-affected-service-interface-of","title":"HPE ClearPass Policy Manager format string vulnerability","severity":"critical","exploited":false,"published_at":"2026-10-06T20:17:30.74+00:00","url":"https://junglewise.ai/threats/cve-2026-76753-a-format-string-vulnerability-in-an-affected-service-interface-of"},{"cve":"CVE-2026-76752","cvss":9.8,"slug":"cve-2026-76752-authentication-bypass-vulnerabilities-exist-in-the-web-based","title":"HPE ClearPass Policy Manager authentication bypass","severity":"critical","exploited":false,"published_at":"2026-10-06T20:17:30.623+00:00","url":"https://junglewise.ai/threats/cve-2026-76752-authentication-bypass-vulnerabilities-exist-in-the-web-based"},{"cve":"CVE-2026-76750","cvss":9.8,"slug":"cve-2026-76750-deserialization-of-untrusted-data-vulnerabilities-exist-in-the","title":"HPE ClearPass Policy Manager deserialization of untrusted data","severity":"critical","exploited":false,"published_at":"2026-10-06T20:17:30.397+00:00","url":"https://junglewise.ai/threats/cve-2026-76750-deserialization-of-untrusted-data-vulnerabilities-exist-in-the"},{"cve":"CVE-2026-79803","cvss":8.8,"slug":"cve-2026-79803-a-command-injection-vulnerability-exists-in-the-api-of-clearpass","title":"HPE ClearPass Policy Manager API command injection","severity":"high","exploited":false,"published_at":"2026-10-06T20:17:31.9+00:00","url":"https://junglewise.ai/threats/cve-2026-79803-a-command-injection-vulnerability-exists-in-the-api-of-clearpass"},{"cve":"CVE-2026-79800","cvss":8.8,"slug":"cve-2026-79800-an-authenticated-path-traversal-vulnerability-exists-in-the","title":"HPE ClearPass Policy Manager path traversal in CLI","severity":"high","exploited":false,"published_at":"2026-10-06T20:17:31.553+00:00","url":"https://junglewise.ai/threats/cve-2026-79800-an-authenticated-path-traversal-vulnerability-exists-in-the"},{"cve":"CVE-2026-79809","cvss":7.3,"slug":"cve-2026-79809-an-unauthenticated-path-traversal-vulnerability-exists-in-an-api","title":"HPE ClearPass Policy Manager path traversal in API endpoint","severity":"high","exploited":false,"published_at":"2026-10-06T20:17:32.483+00:00","url":"https://junglewise.ai/threats/cve-2026-79809-an-unauthenticated-path-traversal-vulnerability-exists-in-an-api"},{"cve":"CVE-2026-79811","cvss":7.2,"slug":"cve-2026-79811-a-sql-injection-vulnerability-in-the-api-of-clearpass-policy","title":"HPE ClearPass Policy Manager API SQL injection","severity":"high","exploited":false,"published_at":"2026-10-06T20:17:32.72+00:00","url":"https://junglewise.ai/threats/cve-2026-79811-a-sql-injection-vulnerability-in-the-api-of-clearpass-policy"},{"cve":"CVE-2026-79816","cvss":6.3,"slug":"cve-2026-79816-a-vulnerability-in-a-client-interface-of-hpe-networking-clearpass","title":"HPE Networking ClearPass Policy Manager DOM-based XSS in client interface","severity":"medium","exploited":false,"published_at":"2026-10-06T20:17:33.317+00:00","url":"https://junglewise.ai/threats/cve-2026-79816-a-vulnerability-in-a-client-interface-of-hpe-networking-clearpass"},{"cve":"CVE-2026-79812","cvss":6.1,"slug":"cve-2026-79812-a-denial-of-service-vulnerability-exists-in-the-onguard-agent-of","title":"HPE ClearPass Policy Manager OnGuard agent denial of service","severity":"medium","exploited":false,"published_at":"2026-10-06T20:17:32.837+00:00","url":"https://junglewise.ai/threats/cve-2026-79812-a-denial-of-service-vulnerability-exists-in-the-onguard-agent-of"}],"generated_at":"2026-11-11T03:07:00.183524+00:00"}