CVE-2026-73769
published 2026-09-09CVE-2026-73769: A vulnerability in the web-based management interface of vulnerable CPPM systems could allow an authenticated remote attacker to achieve remote code execution…
PriorityP354high7.2CVSS 3.1
AVNACLPRHUINSUCHIHAH
EPSS
1.03%
61.6th percentile
A vulnerability in the web-based management interface of vulnerable CPPM systems could allow an authenticated remote attacker to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| hewlett_packard_enterprise | clearpass_policy_manager | 6.11.0 – 6.11.14 | — |
| hewlett_packard_enterprise | clearpass_policy_manager | 6.12.0 – 6.12.8 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
A vulnerability in the web-based management interface of vulnerable CPPM systems could allow an authenticated remote attacker to achieve remote code execution.
ghsa_unreviewed·2026-09-09
CVE-2026-73769 [HIGH] CWE-78 A vulnerability in the web-based management interface of vulnerable CPPM systems could allow an authenticated remote attacker to achieve remote code execution.
A vulnerability in the web-based management interface of vulnerable CPPM systems could allow an authenticated remote attacker to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.
VulDB
HPE ClearPass Policy Manager up to 6.11.14/6.12.8 Web-based Management Interface input validation
vuldb·2026-09-09·CVSS 7.2
CVE-2026-73769 [HIGH] HPE ClearPass Policy Manager up to 6.11.14/6.12.8 Web-based Management Interface input validation
A vulnerability labeled as very critical has been found in HPE ClearPass Policy Manager up to 6.11.14/6.12.8. Affected by this vulnerability is an unknown functionality of the component Web-based Management Interface. Such manipulation leads to improper input validation.
This vulnerability is uniquely identified as CVE-2026-73769. The attack can be launched remotely. No exploit exists.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-09-09
Published