CVE-2026-76752

Authentication bypass vulnerabilities exist in the web-based management and API interfaces of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an unauthenticated remote attacker to circumvent existing authentication controls and gain administrative access to the affected system.

Score

CVSS 3.1 9.8 Critical

Status

Awaiting Analysis - security-alert@hpe.com

Published

2026-10-06

Last modified

2026-10-08

Weaknesses

CWE-287

Affected products

• Clearpass Policy Manager Cppm (Hewlett Packard Enterprise Hpe)

References

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05158en_us&docLocale=en_US