Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-73786

Unauthenticated Network-Based Denial of Service in CPPM systems

CVSS 3.1 7.5 HIGHCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-73786

Published

A vulnerability in the web-based management interface of CPPM could allow an unauthenticated remote attacker to conduct a Denial-of-Service (DoS) attack. Successful exploitation could allow an attacker to cause instability and degrade performance of the vulnerable CPPM server.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-73786

Published

ClearPass Policy Manager (CPPM)

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Hewlett Packard Enterprise (HPE)",
                    "product": "ClearPass Policy Manager (CPPM)",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "6.11.0",
                            "lessThanOrEqual": "6.11.14",
                            "versionType": "semver"
                        }
                    ],
                    "defaultStatus": "affected"
                }

Original source record · Cite this exact observation · Complete original publisher JSON