CVE-2026-76750
9.8 CRITICALPublished 2026-10-06 · Updated 2026-10-08
AI risk analysis
- Summary
- This vulnerability allows unauthenticated attackers to execute arbitrary code on the affected HPE Networking ClearPass Policy Manager web interface by deserializing untrusted data, posing a critical risk.
- Exploitability
- Exploitation is relatively straightforward as it requires no authentication, making it accessible to any unauthenticated remote attacker.
- Blast radius
- If exploited, the impact is severe, as it could lead to full system compromise and execution of arbitrary code on the affected system.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- Upgrade to the specific version 12.0.2.10 or later as published by HPE.
rcewebunauthcode-exec
Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
Deserialization of untrusted data vulnerabilities exist in the web interface of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary code on the affected system.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-502
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- CRITICALCVE-2026-78401
- HIGHCVE-2026-28325
- HIGHCVE-2026-76834PoC
- CRITICALCVE-2026-97248
- CRITICALCVE-2023-54399
- CRITICALCVE-2023-54405PoC
- CRITICALCVE-2025-70518
- CRITICALCVE-2025-70521
Related by shared AI tags and CWE weakness class. Browse the full archive.