CVE-2026-79809

7.3 HIGH

Published 2026-10-06 · Updated 2026-10-07

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

An unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy Manager. Successful exploitation of this vulnerability allows an unauthenticated remote attacker to influence authorization decisions and be assigned an unintended role.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weaknesses

CWE-22

All references

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05158en_us&docLocale=en_US

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

HIGHCVE-2014-125130PoC
HIGHCVE-2017-20284
HIGHCVE-2021-48011PoC
HIGHCVE-2023-54403PoC
MEDIUMCVE-2024-58386PoC
HIGHCVE-2024-58387PoC
HIGHCVE-2024-58388PoC
MEDIUMCVE-2025-1280

Related by shared AI tags and CWE weakness class. Browse the full archive.