Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-73788

Privilege Escalation in ClearPass OnGuard Agent

CVSS 3.1 6.5 MEDIUMCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-73788

Published

A vulnerability in the ClearPass OnGuard agent could allow an authenticated remote attacker to elevate their own privileges on a vulnerable ClearPass OnGuard deployment. Successful exploitation could allow an attacker to obtain root privileges, leading to potentially unauthorized operation of the vulnerable system.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-73788

Published

ClearPass Policy Manager (CPPM)

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Hewlett Packard Enterprise (HPE)",
                    "product": "ClearPass Policy Manager (CPPM)",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "6.12.0",
                            "lessThanOrEqual": "6.12.8",
                            "versionType": "semver"
                        },
                        {
                            "status": "affected",
                            "version": "6.11.0",
                            "lessThanOrEqual": "6.11.14",
                            "versionType": "semver"
                        }
                    ],
                    "defaultStatus": "affected"
                }

Original source record · Cite this exact observation · Complete original publisher JSON