Advisory severityCritical9.8HPE Aruba Networking Updated

Critical [CVE-2026-76751] Missing Integrity Verification in the OnGuard Agent of ClearPass Policy Manager Allows Unauthenticated Remote Code Execution

This critical-severity HPE Aruba Networking advisory covers CVE-2026-76751 affecting ClearPass Policy Manager (CPPM).

Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.

CVE-2026-76751 Source published Oct 6, 2026Source updated Oct 8, 2026

VulniPulse record published Oct 6, 2026Record updated Oct 8, 2026

CVE-2026-76751

Affected products & platforms

HPE Aruba NetworkingClearPassClearPass Policy Manager

Open source advisory

Android app · Google Play

Monitor future HPE Aruba Networking CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery

Get CVE alerts See app features

Summary

A missing integrity verification vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could allow an unauthenticated, remote attacker to execute arbitrary code on the affected endpoint with the elevated privileges of the agent.

Affected product named by the advisory: ClearPass Policy Manager (CPPM).

Affected versions

ClearPass Policy Manager (CPPM) through 6.14.0
ClearPass Policy Manager (CPPM) 6.11.0 through 6.11.15

Official advisory · high-confidence parse· fetched 1 day ago·verify at source

Fixed versions

No fixed release is recorded yet. That does not prove no patch exists — confirm against the vendor advisory.

Official advisory · high-confidence parse· fetched 1 day ago·verify at source

Mitigation

The source record does not include mitigation steps. That is not a statement that no fix exists — read the vendor advisory below for the authoritative guidance.

Official advisory · high-confidence parse· fetched 1 day ago·verify at source

Sources

Official and corroborating records used to build this advisory.

Official vendor advisoryofficial
Official advisory page fetched and parsed; accepted detail fields are attributed to this page.
HPE Aruba Networking
CVE.org CNA recordCVE.org
Independent CNA record used for near-real-time discovery and missed-CVE reconciliation. Discovered from the machine-readable feed https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/delta.json; this link opens the CVE.org record for CVE-2026-76751 instead of the raw feed document.
CVE Program

Cross-references

Validate CVE metadata against the authoritative registries.

CVE-2026-76751NVD CVE.org MITRE

Official resources

Aruba ClearPass documentation & release notes
Official documentation
Official upgrade documentation for Aruba ClearPass documentation & release notes.
HPE Security Bulletin Library (Aruba PSIRT)
Official documentation
Official HPE/Aruba security bulletins — the canonical affected/fixed version table for this CVE.
HPE Networking Support Portal (software downloads)
Official documentation
Official download location for the fixed ArubaOS / AOS-CX / ClearPass / Instant builds.

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.