Skip to content
CVE PROGRAM SOURCE RECORD6.7 Medium

CVE-2026-79814

Local Arbitrary File Write Leading to Local Privilege Escalation in ClearPass Policy Manager OnGuard Agent

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
hpe

Description

An arbitrary file write vulnerability in the ClearPass Policy Manager OnGuard agent could allow malicious users on a local instance to elevate their user privileges if certain preconditions outside of the attacker's control are met. Successful exploitation could allow a local attacker to execute arbitrary code with elevated privileges on the affected system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)

Default version status: affected

  • 6.14.0 to ≤ 6.14.0affected
  • 6.11.0 to ≤ 6.11.15affected

References