Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

ClearPass Policy Manager client lets local users gain admin rights

CVE-2026-79807 · published 29 days ago
Summary

The Windows client for ClearPass Policy Manager does not properly check that its files are unchanged. Because of this, someone with access to the computer could raise their own permissions and run programs as an administrator. Update the client software to the latest version or apply the vendor's patch to restore proper file checks.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
hewlett packard enterprise (hpe) clearpass policy manager (cppm) <= 6.14.0
Original advisory text
Authenticated Local Missing Integrity Verification Vulnerability leads to Local Privilege Escalation in the ClearPass Policy Manager Windows Client Software
A missing integrity verification vulnerability in the Windows client software for ClearPass Policy Manager could allow malicious users on a local instance to elevate their user privileges. A successful exploit could allow these users to execute attacker-supplied code with elevated privileges on the local system.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
7.8 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-347Improper Verification of Cryptographic Signature
Timeline
Published6 Oct 2026
Updated9 Oct 2026
First seen6 Oct 2026
Sources
CVE-2026-79807 · NVD
CVE-2026-79807 · MITRE
Track software like this
Free during beta