CVE-2026-79797CWE-284broken-access-control

CVE-2026-79797

High · published October 7, 2026

CVSS v3.1
8.8
EPSS
0%
Percentile
18.3
In the wild
Unconfirmed
What it is

An improper access control vulnerability exists in the Android client application for HPE Networking ClearPass Policy Manager, where application functionality may be invoked by untrusted sources. Successful exploitation could allow an unauthenticated remote attacker, with user interaction, to obtain sensitive information from the affected user.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00270 · 18.3th percentile
Weakness
CWE-284 · Improper Access Control
Published
2026-10-07T00:17Z
References (1)
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05158en_us&docLocale=en_US · [email protected]
EPSS history
Timeline
  • 08 OCT 03:33Z
    EPSS moved — → 0%
    epss
  • 06 OCT 19:17Z
    Improper Access Control in HPE Networking ClearPass Android Client Application
    cvelistv5