EUVD-2026-75124
GHSA-cj8q-9793-h58q
Severity by source
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Network-accessible web interface with no complexity beyond having admin credentials; PR:H reflects mandatory high-privilege authentication before exploitation.
Primary rating from Vendor (hpe).
CVSS VectorVendor: hpe
Lifecycle Timeline
3DescriptionCVE.org
A vulnerability in the CPPM web interface could allow an authenticated remote attacker to access directory information on a vulnerable system. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.
AnalysisAI
Authenticated remote code execution in HPE Aruba ClearPass Policy Manager (CPPM) allows a high-privileged attacker to access directory information through the web interface and then escalate that access to arbitrary OS command execution on the underlying system. The attack requires valid credentials with elevated privileges (PR:H per CVSS) but is otherwise straightforward - no interaction from another user is needed and complexity is low. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a valid, high-privileged account on the CPPM web interface - unauthenticated access is not possible per the CVSS PR:H metric. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Real-world risk is meaningful but attenuated by the high privilege prerequisite (PR:H). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the vendor-supplied patch as documented in HPE security bulletin hpesbnw05130en_us, available at https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05130en_us&docLocale=en_US. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, audit all HPE Aruba ClearPass Policy Manager instances to identify deployment scope and document administrative access logs for anomalies; immediately restrict web interface access to authorized administrative networks only and enable comprehensive logging of all web interface activities. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-78 – OS Command Injection
View allSame technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today