PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-79817 Hewlett Packard Enterprise (HPE) CVE debrief

A sensitive information disclosure vulnerability exists in the client software of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an attacker with local access to the affected system to obtain sensitive information. This vulnerability is significant for defenders managing HPE Networking ClearPass Policy Manager Client Software, particularly those responsible for system security and patch management. The vulnerability allows an attacker with local access to obtain sensitive information, potentially leading to disclosure of sensitive information, necessitating verification of affected versions and patches, possible restrictions on local access to the ...

Vendor
Hewlett Packard Enterprise (HPE)
Product
ClearPass Policy Manager (CPPM)
CVSS
MEDIUM 5.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-06
Original CVE updated
2026-10-07
Advisory published
2026-10-06
Advisory updated
2026-10-07

Who should care

Defenders managing HPE Networking ClearPass Policy Manager Client Software, especially those responsible for system security and patch management.

Why it matters

Defenders should prioritize verifying and mitigating CVE-2026-79817, as it involves a sensitive information disclosure vulnerability in HPE Networking ClearPass Policy Manager Client Software, potentially allowing attackers with local access to obtain sensitive information.

  • Potential disclosure of sensitive information
  • Need for verification of affected versions and patches
  • Possible restrictions on local access to the affected system
  • Monitoring for suspicious activity related to sensitive information disclosure

Technical summary

A vulnerability in HPE Networking ClearPass Policy Manager Client Software allows an attacker with local access to obtain sensitive information. The client software is affected by a sensitive information disclosure vulnerability, which could be exploited by an attacker to gain access to sensitive information. Defenders should prioritize verifying and mitigating this vulnerability, especially those managing HPE Networking ClearPass Policy Manager Client Software. The vulnerability has a CVSS score of 5.5 and a severity rating of MEDIUM.

Defensive priority

Defenders should prioritize verifying and mitigating this vulnerability, especially those managing HPE Networking ClearPass Policy Manager Client Software.

Recommended defensive actions

  • Verify and apply patches or updates for HPE Networking ClearPass Policy Manager Client Software
  • Restrict local access to the affected system
  • Monitor for suspicious activity related to sensitive information disclosure

Evidence notes

The CVE record and source item provide details about the vulnerability, but additional information from official sources may be necessary for comprehensive mitigation.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-79817 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-79817

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-79817 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-79817

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.