{"schema":"threatline.record/2","record":{"id":"CVE-2026-79801","aliases":[],"summary":"Unauthenticated Missing Integrity Verification allows Remote Code Execution in ClearPass Policy Manager Client Agent","details":"A missing integrity verification vulnerability in the client agent software of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to introduce untrusted code. Successful exploitation could allow an attacker to execute arbitrary code on the affected client system.","categories":["Unclassified"],"product":"ClearPass Policy Manager (CPPM)","vendor":"Hewlett Packard Enterprise (HPE)","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-79801","source_modified_at":"2026-10-08T03:55:39.076Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"ClearPass Policy Manager (CPPM)","vendor":"Hewlett Packard Enterprise (HPE)","versions":[{"lessThanOrEqual":"6.14.0","status":"affected","version":"6.14.0","versionType":"semver"},{"lessThanOrEqual":"6.11.15","status":"affected","version":"6.11.0","versionType":"semver"}],"defaultStatus":"affected"}],"fixed_versions":[],"cvss":9.8,"severity":"Critical","kev":{"listed":false},"epss":{"probability":0.00323,"percentile":0.24166,"score_date":"2026-10-23"},"published_at":"2026-10-06T19:17:04.990Z","modified_at":"2026-10-08T03:55:39.076Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-79801","fetched_at":"2026-10-23T18:48:36.087640Z","source_modified_at":"2026-10-08T03:55:39.076Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-79801","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05158en_us&docLocale=en_US"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"none","automatable":"yes","technical_impact":"total","assessed_at":"2026-10-07T00:00:00+00:00"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-08T03:55:39.076Z","content_hash":"01e861d3ed1106b1e14bd6c18418640237d081f1a64f2b52858061bc8cf22a7f"}}