CVE-2026-76751: Missing Integrity Verification in the OnGuard Agent of ClearPass Policy Manager Allows Unauthenticated Remote Code Execution
A missing integrity verification vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could allow an unauthenticated, remote attacker to execute arbitrary code on the affected endpoint with the elevated privileges of the agent.
Affected Software
Event History
Frequently Asked Questions
Which systems are exposed to this issue?
Endpoints running the Aruba Networks ClearPass Policy Manager OnGuard Agent are affected. The available information does not identify specific agent versions or platforms.
What does an attacker need to exploit it?
The issue is remotely exploitable without authentication, user interaction, or prior privileges. Successful exploitation allows arbitrary code execution with the agent's elevated privileges.
What is the likely impact of successful exploitation?
An attacker could execute arbitrary code on the affected endpoint as the OnGuard agent. The reported impact includes high confidentiality, integrity, and availability consequences.