MinorCritical vulnerability

CVE-2026-79809 (CVSS 7.3)

NVD · officialPublished Oct 6, 2026Risk 23/100

An unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy Manager. Successful exploitation of this vulnerability allows an unauthenticated remote attacker to influence authorization decisions and be assigned an unintended role.

Technical details

CVSS

7.3

AV:NetworkAC:LowPR:NoneUI:NoneC:LowI:LowA:Low

Evidence and sources

This record is attributed to NVD. Exploitation status and remediation guidance are kept separate from the vulnerability's technical severity.

Open primary source