← Back to search

CVE-2026-79807

7.8 HIGH

Published 2026-10-06 · Updated 2026-10-08

AI risk analysis

Summary
A missing integrity verification vulnerability in Windows ClearPass Policy Manager client allows local attackers to elevate privileges and execute code with elevated rights. This represents a significant escalation risk for local system compromise.
Exploitability
Exploitation requires local access to a Windows client system running ClearPass Policy Manager, making it moderately difficult to achieve without prior local foothold but possible through social engineering or physical access.
Blast radius
If exploited, the vulnerability could allow attackers to gain SYSTEM-level privileges on local systems, potentially enabling full system compromise and lateral movement across the network.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
No fixed version is published. Disable the affected ClearPass Policy Manager client functionality until a patch is available or implement strict access controls on systems running the client software.
privilege-escalationlocal-exploitationintegrity-check

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

A missing integrity verification vulnerability in the Windows client software for ClearPass Policy Manager could allow malicious users on a local instance to elevate their user privileges. A successful exploit could allow these users to execute attacker-supplied code with elevated privileges on the local system.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-347

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.