Skip to content
VulniPulse
High7.5HPE Aruba Networking

CVE-2026-73786: Aruba Unauthenticated Network-Based Denial of Service in CPPM systems

This Aruba advisory covers CVE-2026-73786 in ClearPass Policy Manager (CPPM).

Open the Aruba advisory

Key facts

Vendor rating
High, CVSS 7.5
CISA KEV
Not listed (catalogue checked )
Affected
ClearPass Policy Manager (CPPM) 6.11.0 through 6.11.14
Source published
Source revised
Listed by VulniPulse

Compiled by VulniPulse from the linked sources. How records are collected and checked.

Affected products & platforms

HPE Aruba NetworkingClearPassClearPass Policy Manager

Description

A vulnerability in the web-based management interface of CPPM could allow an unauthenticated remote attacker to conduct a Denial-of-Service (DoS) attack. Successful exploitation could allow an attacker to cause instability and degrade performance of the vulnerable CPPM server.

Affected product named by the advisory: ClearPass Policy Manager (CPPM).

Text from the source record.

Affected versions
  • ClearPass Policy Manager (CPPM) 6.11.0 through 6.11.14

Official advisory · high-confidence parse· fetched ·verify at source

HPE Aruba Networking advisories, September 2026All HPE Aruba Networking advisories

Get an email when Aruba ClearPass (NAC) publishes the next one.

See Aruba ClearPass (NAC)'s last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Aruba ClearPass (NAC)

iPhone and Android apps · New on the App Store

Monitor future HPE Aruba Networking CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.