{"schema":"threatline.record/2","record":{"id":"CVE-2026-76750","aliases":[],"summary":"Unauthenticated Deserialization of Untrusted Data allows Remote Code Execution in the Web Interface of HPE Networking ClearPass Policy Manager","details":"Deserialization of untrusted data vulnerabilities exist in the web interface of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary code on the affected system.","categories":["Unclassified"],"product":"ClearPass Policy Manager (CPPM)","vendor":"Hewlett Packard Enterprise (HPE)","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-76750","source_modified_at":"2026-10-08T03:55:27.691Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"ClearPass Policy Manager (CPPM)","vendor":"Hewlett Packard Enterprise (HPE)","versions":[{"lessThanOrEqual":"6.14.0","status":"affected","version":"6.14.0","versionType":"semver"},{"lessThanOrEqual":"6.11.15","status":"affected","version":"6.11.0","versionType":"semver"}],"defaultStatus":"affected"}],"fixed_versions":[],"cvss":9.8,"severity":"Critical","kev":{"listed":false},"epss":{"probability":0.00537,"percentile":0.44457,"score_date":"2026-10-23"},"published_at":"2026-10-06T19:16:55.162Z","modified_at":"2026-10-08T03:55:27.691Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-76750","fetched_at":"2026-10-23T18:48:36.087640Z","source_modified_at":"2026-10-08T03:55:27.691Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-76750","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05158en_us&docLocale=en_US"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"none","automatable":"yes","technical_impact":"total","assessed_at":"2026-10-07T00:00:00+00:00"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-08T03:55:27.691Z","content_hash":"a8a3abac16acf908f321b177e30003f3cdebc84be60ea935ac1a74d74cf691c0"}}