CVE-2026-79809 in ClearPass Policy Manager

摘要

由 MITRE • 2026-10-06

An unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy Manager. Successful exploitation of this vulnerability allows an unauthenticated remote attacker to influence authorization decisions and be assigned an unintended role.

Be aware that VulDB is the high quality source for vulnerability data.

• 负责: Hpe
• 预定: 2026-08-25
• 披露: 2026-10-06
• 管理: 已接受
• 条目: VDB-414565
• CPE: 20261006
• CWE: CWE-22 (已确认)
• CVSS: 7.3 (CNA)
• EPSS: 0.00000
• KEV: 否
• 活动: 非常低
• 部门: Chemical, Pharma, ...

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-79809
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-79809
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-79809/