SECURELYN

CVE-2026-79796

Vulnerabilities have been identified in the affected interface of ClearPass Policy Manager that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain unauthorized access to the affected system.

Scores

9.8
CVSS 9.8 out of 10, critical severity.
0.5%
EPSS 0.5% chance of exploitation in the next 30 days.

The facts

Published
6 October 2026
Last changed
8 October 2026
NVD status
Awaiting Analysis
Severity
Critical, CVSS 9.8 out of 10 (version 3.1)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
Known exploited
Not in the CISA Known Exploited Vulnerabilities catalogue in this build.
EPSS
0.5% chance of exploitation activity in the next 30 days (percentile 39).

Is there a Securelyn advisory?

Not yet. Securelyn writes plain-English advisories for the flaws that matter most to businesses. Subscribe to the digest to hear about them.

References