{"schema":"threatline.record/2","record":{"id":"CVE-2026-76753","aliases":[],"summary":"Unauthenticated Format String Vulnerability in HPE Networking ClearPass Policy Manager","details":"A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to corrupt process memory. Successful exploitation could allow an attacker to execute arbitrary code.","categories":["Unclassified"],"product":"ClearPass Policy Manager (CPPM)","vendor":"Hewlett Packard Enterprise (HPE)","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-76753","source_modified_at":"2026-10-08T03:55:29.791Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"ClearPass Policy Manager (CPPM)","vendor":"Hewlett Packard Enterprise (HPE)","versions":[{"lessThanOrEqual":"6.14.0","status":"affected","version":"6.14.0","versionType":"semver"},{"lessThanOrEqual":"6.11.15","status":"affected","version":"6.11.0","versionType":"semver"}],"defaultStatus":"affected"}],"fixed_versions":[],"cvss":9.8,"severity":"Critical","kev":{"listed":false},"epss":{"probability":0.00525,"percentile":0.43728,"score_date":"2026-10-23"},"published_at":"2026-10-06T19:16:57.720Z","modified_at":"2026-10-08T03:55:29.791Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-76753","fetched_at":"2026-10-23T18:48:36.087640Z","source_modified_at":"2026-10-08T03:55:29.791Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-76753","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05158en_us&docLocale=en_US"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"none","automatable":"yes","technical_impact":"total","assessed_at":"2026-10-07T00:00:00+00:00"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-08T03:55:29.791Z","content_hash":"7caa492ae205cd272df6fa72af5510c0e8adc6ab857634752896f8fe7e7b8c40"}}