CVE-2026-79808
7.8 HIGHPublished 2026-10-06 · Updated 2026-10-08
AI risk analysis
- Summary
- A buffer overflow in ClearPass Policy Manager's OnGuard agent allows authenticated local users to execute arbitrary code with elevated privileges, potentially leading to complete system compromise or service disruption.
- Exploitability
- Exploitation requires a local authenticated user account with minimal privileges, making it moderately difficult but achievable through social engineering or compromised credentials.
- Blast radius
- If exploited, this vulnerability could allow attackers to gain full administrative control over the ClearPass Policy Manager system or cause denial of service for network access control services.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- Upgrade to ClearPass Policy Manager version 9.10 or later to address this buffer overflow vulnerability.
rceprivilege-escalationlocal-exploitnetwork-access-control
Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
A buffer overflow vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could allow an authenticated local user to execute arbitrary code with elevated privileges on the affected host or to disrupt the availability of the affected service.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-120
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2026-20531
- HIGHCVE-2026-47507PoC
- HIGHCVE-2026-47511PoC
- CRITICALCVE-2026-0163
- CRITICALCVE-2026-100202
- CRITICALCVE-2026-100222
- HIGHCVE-2026-100561PoC
- HIGHCVE-2026-100580PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.