CVE-2026-76751: Missing Integrity Verification in the OnGuard Agent of ClearPass Policy Manager Allows Unauthenticated Remote Code Execution

Published Oct 6, 2026

Updated

A missing integrity verification vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could allow an unauthenticated, remote attacker to execute arbitrary code on the affected endpoint with the elevated privileges of the agent.

Affected Software

1 affected component

Aruba Networks ClearPass Policy Manager OnGuard Agent

Event History

Oct 6, 2026

CVE Published

via MITRE·07:16 PM

Data Sourced

via MITRE·07:16 PM

DescriptionSeverity

Data Sourced

via NVD·08:17 PM

DescriptionSeverity

Frequently Asked Questions

Which systems are exposed to this issue?

Endpoints running the Aruba Networks ClearPass Policy Manager OnGuard Agent are affected. The available information does not identify specific agent versions or platforms.

What does an attacker need to exploit it?

The issue is remotely exploitable without authentication, user interaction, or prior privileges. Successful exploitation allows arbitrary code execution with the agent's elevated privileges.

What is the likely impact of successful exploitation?

An attacker could execute arbitrary code on the affected endpoint as the OnGuard agent. The reported impact includes high confidentiality, integrity, and availability consequences.

CVE-2026-76751: Missing Integrity Verification in the OnGuard Agent of ClearPass Policy Manager Allows Unauthenticated Remote Code Execution

Affected Software

Event History

Frequently Asked Questions

Which systems are exposed to this issue?

What does an attacker need to exploit it?

What is the likely impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which systems are exposed to this issue?

What does an attacker need to exploit it?

What is the likely impact of successful exploitation?