{"id":"CVE-2026-79808","published":"2026-10-06T20:17:32.367","lastModified":"2026-10-08T04:17:50.823","description":"A buffer overflow vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could allow an authenticated local user to execute arbitrary code with elevated privileges on the affected host or to disrupt the availability of the affected service.","cvssScore":7.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-120"],"vendors":[],"products":[],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05158en_us&docLocale=en_US","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A buffer overflow in ClearPass Policy Manager's OnGuard agent allows authenticated local users to execute arbitrary code with elevated privileges, potentially leading to complete system compromise or service disruption.","exploitability":"Exploitation requires a local authenticated user account with minimal privileges, making it moderately difficult but achievable through social engineering or compromised credentials.","blast_radius":"If exploited, this vulnerability could allow attackers to gain full administrative control over the ClearPass Policy Manager system or cause denial of service for network access control services.","remediation":"Upgrade to ClearPass Policy Manager version 9.10 or later to address this buffer overflow vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","privilege-escalation","local-exploit","network-access-control"],"model":"garnet-coder","analyzedAt":"2026-10-14T09:00:41.883Z"}}