{"id":"CVE-2026-79801","aliases":["EUVD-2026-93888","GHSA-rc64-m9vj-82j9"],"status":"published","title":"Unauthenticated Missing Integrity Verification allows Remote Code Execution in ClearPass Policy Manager Client Agent","description":"A missing integrity verification vulnerability in the client agent software of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to introduce untrusted code. Successful exploitation could allow an attacker to execute arbitrary code on the affected client system.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00324,"percentile":0.25732,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-353"],"published":"2026-10-06T19:17:04Z","modified":"2026-10-08T04:17:47Z","products":[{"vendor":"hewlett packard enterprise (hpe)","product":"clearpass policy manager (cppm)"}],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05158en_us\u0026docLocale=en_US"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-79801"},{"url":"https://github.com/advisories/GHSA-rc64-m9vj-82j9"}],"sources":{"cve":[{"id":"CVE-2026-79801","title":"Unauthenticated Missing Integrity Verification allows Remote Code Execution in ClearPass Policy Manager Client Agent","description":"A missing integrity verification vulnerability in the client agent software of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to introduce untrusted code. Successful exploitation could allow an attacker to execute arbitrary code on the affected client system.","status":"published","published":"2026-10-06T19:17:04.99Z","modified":"2026-10-08T03:55:39.076Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-353"],"updated_at":"2026-11-02T13:50:27.582139Z"}],"euvd":[{"id":"EUVD-2026-93888","description":"A missing integrity verification vulnerability in the client agent software of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to introduce untrusted code. Successful exploitation could allow an attacker to execute arbitrary code on the affected client system.","status":"published","published":"2026-10-06T19:17:04Z","modified":"2026-10-08T03:55:39Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T17:27:33.555595Z"}],"ghsa":[{"id":"GHSA-rc64-m9vj-82j9","title":"A missing integrity verification vulnerability in the client agent software of HPE Networking...","description":"A missing integrity verification vulnerability in the client agent software of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to introduce untrusted code. Successful exploitation could allow an attacker to execute arbitrary code on the affected client system.","status":"published","published":"2026-10-06T21:32:02Z","modified":"2026-10-07T21:33:24Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-353"],"updated_at":"2026-11-02T15:12:55.347665Z"}],"nvd":[{"id":"CVE-2026-79801","description":"A missing integrity verification vulnerability in the client agent software of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to introduce untrusted code. Successful exploitation could allow an attacker to execute arbitrary code on the affected client system.","status":"published","published":"2026-10-06T20:17:31.667Z","modified":"2026-10-08T04:17:47.373Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-353"],"updated_at":"2026-11-02T14:12:54.809359Z"}]}}