{"schema":"threatline.record/2","record":{"id":"CVE-2026-79797","aliases":[],"summary":"Improper Access Control in HPE Networking ClearPass Android Client Application","details":"An improper access control vulnerability exists in the Android client application for HPE Networking ClearPass Policy Manager, where application functionality may be invoked by untrusted sources. Successful exploitation could allow an unauthenticated remote attacker, with user interaction, to obtain sensitive information from the affected user.","categories":["Unclassified"],"product":"ClearPass Policy Manager (CPPM)","vendor":"Hewlett Packard Enterprise (HPE)","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-79797","source_modified_at":"2026-10-08T03:55:33.515Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"ClearPass Policy Manager (CPPM)","vendor":"Hewlett Packard Enterprise (HPE)","versions":[{"lessThanOrEqual":"6.14.0","status":"affected","version":"6.14.0","versionType":"semver"},{"lessThanOrEqual":"6.11.15","status":"affected","version":"6.11.0","versionType":"semver"}],"defaultStatus":"affected"}],"fixed_versions":[],"cvss":8.8,"severity":"High","kev":{"listed":false},"epss":{"probability":0.0027,"percentile":0.1828,"score_date":"2026-10-23"},"published_at":"2026-10-06T19:17:01.167Z","modified_at":"2026-10-08T03:55:33.515Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-79797","fetched_at":"2026-10-23T18:48:36.087640Z","source_modified_at":"2026-10-08T03:55:33.515Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-79797","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05158en_us&docLocale=en_US"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"none","automatable":"no","technical_impact":"total","assessed_at":"2026-10-07T00:00:00+00:00"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-08T03:55:33.515Z","content_hash":"16007b2d04d6b415cb33a9644ff90a0bbb9baed2829f162a5ad98de19012ee89"}}