← Back to search

CVE-2026-79808

7.8 HIGH

Published 2026-10-06 · Updated 2026-10-08

AI risk analysis

Summary
A buffer overflow in ClearPass Policy Manager's OnGuard agent allows authenticated local users to execute arbitrary code with elevated privileges, potentially leading to complete system compromise or service disruption.
Exploitability
Exploitation requires a local authenticated user account with minimal privileges, making it moderately difficult but achievable through social engineering or compromised credentials.
Blast radius
If exploited, this vulnerability could allow attackers to gain full administrative control over the ClearPass Policy Manager system or cause denial of service for network access control services.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Upgrade to ClearPass Policy Manager version 9.10 or later to address this buffer overflow vulnerability.
rceprivilege-escalationlocal-exploitnetwork-access-control

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

A buffer overflow vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could allow an authenticated local user to execute arbitrary code with elevated privileges on the affected host or to disrupt the availability of the affected service.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-120

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.