CVE-2026-79805

{
  "etk_id": "ETK-2026-807",
  "cve_id": "CVE-2026-79805",
  "display_id": "CVE-2026-79805",
  "ghsa_id": "GHSA-6f23-w4wq-f8hw",
  "euvd_id": "EUVD-2026-93891",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Authenticated path traversal in ClearPass Policy Manager",
  "summary": "ClearPass Policy Manager is affected by an authenticated path traversal flaw. An attacker with valid access may be able to access or alter certain files on the underlying operating system.",
  "mitigation": "Restrict authenticated ClearPass Policy Manager access to trusted users and networks, and review account permissions. Monitor for and apply vendor updates when a fixed release is published.",
  "vendor": "Hewlett Packard Enterprise (HPE)",
  "product": "ClearPass Policy Manager (CPPM)",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 6.14.0, <= 6.14.0",
        ">= 6.11.0, <= 6.11.15"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "ClearPass Policy Manager (CPPM)",
      "purl": null
    }
  ],
  "cwes": null,
  "cvss_score": 9.8,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "epss_score": 0.0043,
  "epss_percentile": 0.3605,
  "epss_asof": "2026-10-20",
  "automation": "contextual",
  "check": true,
  "check_confidence_basis": "assessed",
  "exploit": false,
  "pipeline_minutes": 22.989172583333332,
  "t0_at": "2026-10-06T19:17:08.171000+00:00",
  "signals": {
    "check": {
      "at": "2026-10-06T20:41:41.290322+00:00",
      "days": 0.05871665881944445,
      "is_lower_bound": false,
      "measured_at": "2026-10-06T19:17:08.171000+00:00",
      "url": null
    },
    "trigger_signal": {
      "at": "2026-10-06T19:17:08.171000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-06T19:17:08.171000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-79805"
    }
  }
}