CVE-2026-79814
Local Arbitrary File Write Leading to Local Privilege Escalation in ClearPass Policy Manager OnGuard Agent
Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
CVSS
6.7MediumExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.09%Chance of exploitation activity in the next 30 days, higher than 0% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version yet
What fixes it
No source in this snapshot names a fixed version.
Description
An arbitrary file write vulnerability in the ClearPass Policy Manager OnGuard agent could allow malicious users on a local instance to elevate their user privileges if certain preconditions outside of the attacker's control are met. Successful exploitation could allow a local attacker to execute arbitrary code with elevated privileges on the affected system.
Text from CVE List
Affected versions 2
- ClearPass Policy Manager (CPPM)affected: 6.14.0 through 6.14.0CVE List
- ClearPass Policy Manager (CPPM)affected: 6.11.0 through 6.11.15CVE List