AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Hewlett Packard EnterpriseCVE-2026-73787

Hewlett Packard Enterprise ClearPass Policy Manager: remote code execution

Hewlett Packard Enterprise

CVE-2026-73787 · Published Sep 9, 2026 · updated Sep 11, 2026

High7.2
No fix yet
Hewlett Packard Enterprise advisory

A vulnerability in the CPPM web interface could allow an authenticated remote attacker to access directory information on a vulnerable system. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

Affected versions

PackageAffectedFixed in
ClearPass Policy Manager (CPPM)
Product
>= 6.11.0, <= 6.11.14No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-78

More Hewlett Packard Enterprise advisories

All Hewlett Packard Enterprise
High 7.5Sep 11Hewlett Packard Enterprise HPE IceWall products: denial of serviceCVE-2026-73785no fix yetHigh 8.8Sep 11Hewlett Packard Enterprise HPE IceWall products: improper signature checkCVE-2026-73784no fix yetHigh 7.2Sep 9Hewlett Packard Enterprise ClearPass Policy Manager: remote code executionCVE-2026-73769no fix yetHigh 7.5Sep 9Hewlett Packard Enterprise ClearPass Policy Manager (CPPM): denial of serviceCVE-2026-73786no fix yetMedium 6.5Sep 9Hewlett Packard Enterprise ClearPass: improper privilege managementCVE-2026-73788no fix yetMedium 5.3Sep 9Hewlett Packard Enterprise ClearPass: unauthenticated remote attacker could...CVE-2026-73789no fix yet