{"id":"CVE-2026-76750","published":"2026-10-06T20:17:30.397","lastModified":"2026-10-08T04:17:38.110","description":"Deserialization of untrusted data vulnerabilities exist in the web interface of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary code on the affected system.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-502"],"vendors":[],"products":[],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05158en_us&docLocale=en_US","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This vulnerability allows unauthenticated attackers to execute arbitrary code on the affected HPE Networking ClearPass Policy Manager web interface by deserializing untrusted data, posing a critical risk.","exploitability":"Exploitation is relatively straightforward as it requires no authentication, making it accessible to any unauthenticated remote attacker.","blast_radius":"If exploited, the impact is severe, as it could lead to full system compromise and execution of arbitrary code on the affected system.","remediation":"Upgrade to the specific version 12.0.2.10 or later as published by HPE.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","web","unauth","code-exec"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-07T08:43:31.668Z"}}