{ "dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": { "cveId": "CVE-2026-79812", "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0", "state": "PUBLISHED", "assignerShortName": "hpe", "dateReserved": "2026-08-25T14:46:11.264Z", "datePublished": "2026-10-06T19:17:14.552Z", "dateUpdated": "2026-10-07T18:03:19.881Z" }, "containers": { "cna": { "affected": [ { "defaultStatus": "affected", "product": "ClearPass Policy Manager (CPPM)", "vendor": "Hewlett Packard Enterprise (HPE)", "versions": [ { "lessThanOrEqual": "6.14.0", "status": "affected", "version": "6.14.0", "versionType": "semver" }, { "lessThanOrEqual": "6.11.15", "status": "affected", "version": "6.11.0", "versionType": "semver" } ] } ], "credits": [ { "lang": "en", "type": "reporter", "value": "Internal security research (HPE Networking)." } ], "descriptions": [ { "lang": "en", "value": "A denial of service vulnerability exists in the OnGuard agent of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an authenticated local attacker to interrupt the normal operation of the agent service." } ], "metrics": [ { "cvssV3_1": { "attackComplexity": "LOW", "attackVector": "LOCAL", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "availabilityImpact": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H", "version": "3.1" }, "format": "CVSS", "scenarios": [ { "lang": "en", "value": "GENERAL" } ] } ], "providerMetadata": { "orgId": "eb103674-0d28-4225-80f8-39fb86215de0", "shortName": "hpe", "dateUpdated": "2026-10-06T19:17:14.552Z" }, "references": [ { "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05158en_us&docLocale=en_US" } ], "source": { "advisory": "HPESBNW05158", "discovery": "INTERNAL" }, "title": "Authenticated Local Denial-of-Service Vulnerability in the OnGuard Agent of ClearPass Policy Manager", "x_generator": { "engine": "Vulnogram 0.2.0" } }, "adp": [ { "problemTypes": [ { "descriptions": [ { "type": "CWE", "cweId": "CWE-400", "lang": "en", "description": "CWE-400 Uncontrolled Resource Consumption" } ] } ], "metrics": [ { "other": { "type": "ssvc", "content": { "timestamp": "2026-10-07T18:02:53.596007Z", "id": "CVE-2026-79812", "options": [ { "Exploitation": "none" }, { "Automatable": "no" }, { "Technical Impact": "partial" } ], "role": "CISA Coordinator", "version": "2.0.3" } } } ], "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-07T18:03:19.881Z" } } ] } }