{"id":"CVE-2026-76751","title":"A missing integrity verification vulnerability exists in the OnGuard agent of ClearPass Policy Manager","summary":"A missing integrity verification vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could allow an unauthenticated, remote attacker to execute arbitrary code on the affected endpoint with the e…","severity":"critical","cvss":9.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","vendor":"Hewlett Packard Enterprise (HPE)","product":"ClearPass Policy Manager (CPPM)","affected":["clearpass_policy_manager_cppm >= 6.14.0 <= 6.14.0","clearpass_policy_manager_cppm >= 6.11.0 <= 6.11.15"],"published":"2026-10-06","updated":"2026-10-06","sourceUpdated":"2026-10-06T20:17:30.513","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-76751","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05158en_us&docLocale=en_US","label":"security-alert@hpe.com"}],"tags":["nvd","cve.org"],"ingestedAt":"2026-10-06T20:16:42.509Z","slug":"CVE-2026-76751","body":"## Overview\n\nA missing integrity verification vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could allow an unauthenticated, remote attacker to execute arbitrary code on the affected endpoint with the elevated privileges of the agent.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":54,"depthScoreParts":{"impact":53.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}