Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-76750

Unauthenticated Deserialization of Untrusted Data allows Remote Code Execution in the Web Interface of HPE Networking ClearPass Policy Manager

Published
Last modified
Status
published
Known exploitation
Not listed in CISA KEV
Public exploit
None on Exploit-DB
CISA SSVC
  • Exploitation: none
  • Automatable: yes
  • Technical impact: total
?

Decision points from CISA's Vulnrichment, assessed (SSVC 2.0.3).

SSVC documentation

Summary

Deserialization of untrusted data vulnerabilities exist in the web interface of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary code on the affected system.

Affected versions

  • Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)

    From 6.14.0 · through 6.14.0; From 6.11.0 · through 6.11.15

References 1

support.hpe.com