Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

ClearPass Policy Manager allows file read/modify via path traversal

CVE-2026-79805 · published 12 days ago
Summary

If an attacker gains a valid login to ClearPass Policy Manager, they can trick the system into accessing files outside its normal area. This could let them view or change important system files, potentially affecting security and operations. Apply the latest security update from HPE and restrict access to trusted users only.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
hewlett packard enterprise (hpe) clearpass policy manager (cppm) <= 6.14.0
Original advisory text
Authenticated Path Traversal Vulnerability Leads to Unauthorized File Access and Modification in ClearPass Policy Manager
An authenticated path traversal vulnerability exists in ClearPass Policy Manager. Successful exploitation could allow an attacker to read and modify certain files on the underlying operating system.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.8 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-22Path Traversal
Timeline
Published6 Oct 2026
Updated15 Oct 2026
First seen6 Oct 2026
Sources
CVE-2026-79805 · NVD
CVE-2026-79805 · MITRE
Track software like this
Free during beta