CVE-2026-79809 in ClearPass Policy Manager

요약

\~에 의해 MITRE • 2026. 10. 06.

An unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy Manager. Successful exploitation of this vulnerability allows an unauthenticated remote attacker to influence authorization decisions and be assigned an unintended role.

Be aware that VulDB is the high quality source for vulnerability data.

• 책임이 있는: Hpe
• 예약하다: 2026. 08. 25.
• 공개: 2026. 10. 06.
• 모더레이션: 수락
• 항목: VDB-414565
• CPE: 20261006
• CWE: CWE-22 (확인됨)
• CVSS: 7.3 (CNA)
• EPSS: 0.00000
• KEV: 아니요
• 활동: 매우 낮음
• 부문: Insurance, Police, ...

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-79809
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-79809
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-79809/