CVE-2026-76752: Authentication Bypass Vulnerabilities in HPE Networking ClearPass Policy Manager Allow Unauthorized Administrative Access
Published Oct 6, 2026
·Updated
Authentication bypass vulnerabilities exist in the web-based management and API interfaces of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an unauthenticated remote attacker to circumvent existing authentication controls and gain administrative access to the affected system.
Affected Software
1 affected component
HPE ClearPass Policy Manager
Event History
Oct 6, 2026
CVE Published
via MITRE·07:16 PM
Data Sourced
via MITRE·07:16 PM
DescriptionSeverity
Data Sourced
via NVD·08:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
An unauthenticated remote attacker can exploit the affected web-based management or API interfaces. No credentials or user interaction are required.
2
What level of access could successful exploitation provide?
Successful exploitation could let an attacker bypass authentication controls and obtain administrative access to the affected ClearPass Policy Manager system.