CVE-2026-79796

{
  "etk_id": "ETK-2026-818",
  "cve_id": "CVE-2026-79796",
  "display_id": "CVE-2026-79796",
  "ghsa_id": "GHSA-7wf7-w5jj-hhjq",
  "euvd_id": "EUVD-2026-93883",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Authentication bypass in ClearPass Policy Manager",
  "summary": "ClearPass Policy Manager contains an issue in an affected interface that can bypass existing authentication controls. An unauthenticated remote attacker may gain unauthorized access if they can reach that interface.",
  "mitigation": "Restrict network access to ClearPass Policy Manager and its exposed interfaces to trusted administrative networks until vendor remediation guidance is available. No fixed version is recorded in the advisory data.",
  "vendor": "hewlett packard enterprise (hpe)",
  "product": "ClearPass Policy Manager (CPPM)",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 6.14.0, <= 6.14.0",
        ">= 6.11.0, <= 6.11.15"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "ClearPass Policy Manager (CPPM)",
      "purl": null
    }
  ],
  "cwes": null,
  "cvss_score": 9.8,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "epss_score": 0.0047,
  "epss_percentile": 0.39,
  "epss_asof": "2026-10-20",
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 10.749876733333334,
  "t0_at": "2026-10-06T19:17:00.320000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-06T19:17:00.320000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-06T19:17:00.320000+00:00",
      "url": "https://github.com/advisories/GHSA-7wf7-w5jj-hhjq"
    }
  }
}