CVE-2026-76750: Unauthenticated Deserialization of Untrusted Data allows Remote Code Execution in the Web Interface of HPE Networking ClearPass Policy Manager
Deserialization of untrusted data vulnerabilities exist in the web interface of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary code on the affected system.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An unauthenticated remote attacker can exploit the vulnerable web interface. No credentials or user interaction are required according to the provided severity vector.
What impact could successful exploitation have?
Successful exploitation could allow arbitrary code execution on the affected ClearPass Policy Manager system. The severity vector indicates high impact to confidentiality, integrity, and availability.
Is the web interface exposure relevant to triage?
Yes. The vulnerable component is the web interface, so systems where that interface is reachable by untrusted remote networks have the relevant attack path described in the advisory.