{"id":"CVE-2026-79807","published":"2026-10-06T20:17:32.253","lastModified":"2026-10-08T04:17:50.540","description":"A missing integrity verification vulnerability in the Windows client software for ClearPass Policy Manager could allow malicious users on a local instance to elevate their user privileges. A successful exploit could allow these users to execute attacker-supplied code with elevated privileges on the local system.","cvssScore":7.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-347"],"vendors":[],"products":[],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05158en_us&docLocale=en_US","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A missing integrity verification vulnerability in Windows ClearPass Policy Manager client allows local attackers to elevate privileges and execute code with elevated rights. This represents a significant escalation risk for local system compromise.","exploitability":"Exploitation requires local access to a Windows client system running ClearPass Policy Manager, making it moderately difficult to achieve without prior local foothold but possible through social engineering or physical access.","blast_radius":"If exploited, the vulnerability could allow attackers to gain SYSTEM-level privileges on local systems, potentially enabling full system compromise and lateral movement across the network.","remediation":"No fixed version is published. Disable the affected ClearPass Policy Manager client functionality until a patch is available or implement strict access controls on systems running the client software.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["privilege-escalation","local-exploitation","integrity-check"],"model":"garnet-coder","analyzedAt":"2026-10-14T09:00:50.716Z"}}