CVE-2026-76750 in ClearPass Policy Manager

Resumen

por MITRE • 2026-10-06

Deserialization of untrusted data vulnerabilities exist in the web interface of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary code on the affected system.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsable: Hpe
• Reservar: 2026-08-19
• Divulgación: 2026-10-06
• Moderación: aceptado
• Artículo: VDB-414498
• CPE: 20261006
• CWE: CWE-502 (confirmado)
• CVSS: 9.8 (CNA)
• EPSS: 0.00000
• KEV: no
• Actividades: muy bajo
• Sector: Finance, Police, ...

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-76750
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-76750
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-76750/