MDR
Solutions
Partners
About
Resources
Affected Environment
HPE Networking ClearPass Policy Manager 6.14.0 and below, and 6.11.15 and below, including OnGuard and client agents.
Threat Overview
Twenty-eight vulnerabilities, led by CVE-2026-79798, a CVSS 9.9 SQL injection, plus unauthenticated RCE and authentication bypass flaws.
Exposure Timeline
Disclosed 6 October 2026; updates, hot fixes, and mitigations are available from HPE.
Attack Surface
ClearPass web management interface, APIs, command line interface, OnGuard agents, and Windows, Linux, and Android clients.
Technical Root Cause
SQL injection, deserialization of untrusted data, missing integrity verification, format string, command injection, and path traversal flaws.
Exploitation Pathway
Unauthenticated attackers abuse web interfaces or agents for code execution; low-privileged users inject SQL or escalate privileges.
Operational Impact
Arbitrary code execution, administrative takeover, database manipulation, and service disruption on network access control infrastructure.
Strategic Impact
ClearPass governs network access decisions; compromise undermines authentication, authorisation, and device posture enforcement across the network.
Required Mitigation
Apply HPE updates and hot fixes to ClearPass and OnGuard clients; restrict management access to trusted networks.
Incident Response Guidance
Review administrative and API logs for SQL injection or authentication anomalies, rotate credentials, and verify OnGuard agent integrity.
References
HPE Security Bulletin.
Trusted by clients worldwide
Led by human expertise and powered by the VisionX platform, we provide you with a 24/7 unbeatable Managed Detection & Response capability giving you transparent and consolidated security solutions.
.jpg)