# Hpe ClearPass Policy Manager vulnerabilities Source: https://junglewise.ai/threats/technologies/hpe-clearpass-policy-manager Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 11 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/hpe-clearpass-policy-manager.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 12 vulnerabilities in Hpe ClearPass Policy Manager: 0 in the last 7 days and 12 in the last 90 days, 4 of them critical and 0 exploited in the wild. The most recent, CVE-2026-79818, was published on 6 October 2026. Nothing in the last four weeks, down from 12 vulnerabilities in the four before. 0 critical against 4. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 12 - All time: 12 (4 critical, 0 exploited in the wild) ## About Hpe ClearPass Policy Manager Network access control and policy management appliance for HPE/Aruba environments. ## Latest Hpe ClearPass Policy Manager vulnerabilities - [CVE-2026-79818: HPE ClearPass Policy Manager API authentication bypass](https://junglewise.ai/threats/cve-2026-79818-a-vulnerability-in-an-api-interface-of-clearpass-policy-manager) (medium, CVSS 5.3, published 6 Oct 2026) - [CVE-2026-79817: HPE ClearPass Policy Manager client information disclosure](https://junglewise.ai/threats/cve-2026-79817-a-sensitive-information-disclosure-vulnerability-exists-in-the) (medium, CVSS 5.5, published 6 Oct 2026) - [CVE-2026-79816: HPE Networking ClearPass Policy Manager DOM-based XSS in client interface](https://junglewise.ai/threats/cve-2026-79816-a-vulnerability-in-a-client-interface-of-hpe-networking-clearpass) (medium, CVSS 6.3, published 6 Oct 2026) - [CVE-2026-79812: HPE ClearPass Policy Manager OnGuard agent denial of service](https://junglewise.ai/threats/cve-2026-79812-a-denial-of-service-vulnerability-exists-in-the-onguard-agent-of) (medium, CVSS 6.1, published 6 Oct 2026) - [CVE-2026-79811: HPE ClearPass Policy Manager API SQL injection](https://junglewise.ai/threats/cve-2026-79811-a-sql-injection-vulnerability-in-the-api-of-clearpass-policy) (high, CVSS 7.2, published 6 Oct 2026) - [CVE-2026-79809: HPE ClearPass Policy Manager path traversal in API endpoint](https://junglewise.ai/threats/cve-2026-79809-an-unauthenticated-path-traversal-vulnerability-exists-in-an-api) (high, CVSS 7.3, published 6 Oct 2026) - [CVE-2026-79805: HPE ClearPass Policy Manager authenticated path traversal](https://junglewise.ai/threats/cve-2026-79805-an-authenticated-path-traversal-vulnerability-exists-in-clearpass) (critical, CVSS 9.8, published 6 Oct 2026) - [CVE-2026-79803: HPE ClearPass Policy Manager API command injection](https://junglewise.ai/threats/cve-2026-79803-a-command-injection-vulnerability-exists-in-the-api-of-clearpass) (high, CVSS 8.8, published 6 Oct 2026) - [CVE-2026-79800: HPE ClearPass Policy Manager path traversal in CLI](https://junglewise.ai/threats/cve-2026-79800-an-authenticated-path-traversal-vulnerability-exists-in-the) (high, CVSS 8.8, published 6 Oct 2026) - [CVE-2026-76753: HPE ClearPass Policy Manager format string vulnerability](https://junglewise.ai/threats/cve-2026-76753-a-format-string-vulnerability-in-an-affected-service-interface-of) (critical, CVSS 9.8, published 6 Oct 2026) - [CVE-2026-76752: HPE ClearPass Policy Manager authentication bypass](https://junglewise.ai/threats/cve-2026-76752-authentication-bypass-vulnerabilities-exist-in-the-web-based) (critical, CVSS 9.8, published 6 Oct 2026) - [CVE-2026-76750: HPE ClearPass Policy Manager deserialization of untrusted data](https://junglewise.ai/threats/cve-2026-76750-deserialization-of-untrusted-data-vulnerabilities-exist-in-the) (critical, CVSS 9.8, published 6 Oct 2026) ## Most severe Hpe ClearPass Policy Manager vulnerabilities - [CVE-2026-79805: HPE ClearPass Policy Manager authenticated path traversal](https://junglewise.ai/threats/cve-2026-79805-an-authenticated-path-traversal-vulnerability-exists-in-clearpass) (critical, CVSS 9.8, published 6 Oct 2026) - [CVE-2026-76753: HPE ClearPass Policy Manager format string vulnerability](https://junglewise.ai/threats/cve-2026-76753-a-format-string-vulnerability-in-an-affected-service-interface-of) (critical, CVSS 9.8, published 6 Oct 2026) - [CVE-2026-76752: HPE ClearPass Policy Manager authentication bypass](https://junglewise.ai/threats/cve-2026-76752-authentication-bypass-vulnerabilities-exist-in-the-web-based) (critical, CVSS 9.8, published 6 Oct 2026) - [CVE-2026-76750: HPE ClearPass Policy Manager deserialization of untrusted data](https://junglewise.ai/threats/cve-2026-76750-deserialization-of-untrusted-data-vulnerabilities-exist-in-the) (critical, CVSS 9.8, published 6 Oct 2026) - [CVE-2026-79803: HPE ClearPass Policy Manager API command injection](https://junglewise.ai/threats/cve-2026-79803-a-command-injection-vulnerability-exists-in-the-api-of-clearpass) (high, CVSS 8.8, published 6 Oct 2026) - [CVE-2026-79800: HPE ClearPass Policy Manager path traversal in CLI](https://junglewise.ai/threats/cve-2026-79800-an-authenticated-path-traversal-vulnerability-exists-in-the) (high, CVSS 8.8, published 6 Oct 2026) - [CVE-2026-79809: HPE ClearPass Policy Manager path traversal in API endpoint](https://junglewise.ai/threats/cve-2026-79809-an-unauthenticated-path-traversal-vulnerability-exists-in-an-api) (high, CVSS 7.3, published 6 Oct 2026) - [CVE-2026-79811: HPE ClearPass Policy Manager API SQL injection](https://junglewise.ai/threats/cve-2026-79811-a-sql-injection-vulnerability-in-the-api-of-clearpass-policy) (high, CVSS 7.2, published 6 Oct 2026) - [CVE-2026-79816: HPE Networking ClearPass Policy Manager DOM-based XSS in client interface](https://junglewise.ai/threats/cve-2026-79816-a-vulnerability-in-a-client-interface-of-hpe-networking-clearpass) (medium, CVSS 6.3, published 6 Oct 2026) - [CVE-2026-79812: HPE ClearPass Policy Manager OnGuard agent denial of service](https://junglewise.ai/threats/cve-2026-79812-a-denial-of-service-vulnerability-exists-in-the-onguard-agent-of) (medium, CVSS 6.1, published 6 Oct 2026) ## Vulnerabilities per week Nothing in the last four weeks, down from 12 vulnerabilities in the four before. 0 critical against 4. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 12 | 4 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Hpe technologies - [Hpe Networking Fabric Composer](https://junglewise.ai/threats/technologies/networking-fabric-composer): 92 vulnerabilities - [Hpe EdgeConnect SD-WAN Gateway](https://junglewise.ai/threats/technologies/edgeconnect-sd-wan-gateway): 16 vulnerabilities - [Hpe Analytics and Location Engine](https://junglewise.ai/threats/technologies/analytics-and-location-engine): 9 vulnerabilities - [Hpe Networking Instant On](https://junglewise.ai/threats/technologies/networking-instant-on): 9 vulnerabilities - [Hpe Arubaos-Cx](https://junglewise.ai/threats/technologies/arubaos-cx): 6 vulnerabilities - [Hpe AOS-S](https://junglewise.ai/threats/technologies/hpe-aos-s): 5 vulnerabilities - [Hpe ](https://junglewise.ai/threats/technologies/hpe-unknown): 4 vulnerabilities - [Hpe Networking Instant ON APs](https://junglewise.ai/threats/technologies/networking-instant-on-aps): 4 vulnerabilities - [Hpe Networking VIA](https://junglewise.ai/threats/technologies/networking-via): 4 vulnerabilities - [Hpe EdgeConnect SD-WAN Orchestrator](https://junglewise.ai/threats/technologies/hpe-edgeconnect-sd-wan-orchestrator): 3 vulnerabilities - [Hpe OneView](https://junglewise.ai/threats/technologies/hpe-oneview): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Hpe ClearPass Policy Manager vulnerabilities", https://junglewise.ai/threats/technologies/hpe-clearpass-policy-manager, 11 November 2026.