{"id":"CVE-2026-76753","published":"2026-10-06T20:17:30.740","lastModified":"2026-10-08T04:17:39.570","description":"A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to corrupt process memory. Successful exploitation could allow an attacker to execute arbitrary code.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-134"],"vendors":[],"products":[],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05158en_us&docLocale=en_US","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A format string vulnerability in HPE Networking ClearPass Policy Manager allows unauthenticated attackers to corrupt process memory, potentially leading to arbitrary code execution.","exploitability":"Exploitation is relatively straightforward given the unauthenticated nature and could be attempted by any remote attacker.","blast_radius":"If exploited, this vulnerability could result in full control over the affected system, including data exfiltration and lateral movement within the network.","remediation":"Upgrade to the specific version 10.1.2.10 or later as published by the vendor.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","format-string","unauthenticated","memory-corruption"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-07T08:43:33.940Z"}}