Advisory severityHigh8.8HPE Aruba Networking Updated

High [CVE-2026-79797] ClearPass Policy Manager: improper access control vulnerability exists in the Android client application for HPE Networking ClearPass Policy Manager, where application functionality may be invoked by untrusted sources

This high-severity HPE Aruba Networking advisory covers CVE-2026-79797 affecting ClearPass Policy Manager (CPPM).

Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.

CVE-2026-79797 Source published Oct 6, 2026Source updated Oct 8, 2026

VulniPulse record published Oct 6, 2026Record updated Oct 8, 2026

CVE-2026-79797

Affected products & platforms

HPE Aruba NetworkingClearPassClearPass Policy Manager

Open source advisory

Android app · Google Play

Monitor future HPE Aruba Networking CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery

Get CVE alerts See app features

Summary

An improper access control vulnerability exists in the Android client application for HPE Networking ClearPass Policy Manager, where application functionality may be invoked by untrusted sources. Successful exploitation could allow an unauthenticated remote attacker, with user interaction, to obtain sensitive information from the affected user.

Affected product named by the advisory: ClearPass Policy Manager (CPPM).

Affected versions

ClearPass Policy Manager (CPPM) through 6.14.0
ClearPass Policy Manager (CPPM) 6.11.0 through 6.11.15

Official advisory · high-confidence parse· fetched 1 day ago·verify at source

Fixed versions

No fixed release is recorded yet. That does not prove no patch exists — confirm against the vendor advisory.

Official advisory · high-confidence parse· fetched 1 day ago·verify at source

Mitigation

The source record does not include mitigation steps. That is not a statement that no fix exists — read the vendor advisory below for the authoritative guidance.

Official advisory · high-confidence parse· fetched 1 day ago·verify at source

Sources

Official and corroborating records used to build this advisory.

Official vendor advisoryofficial
Official advisory page fetched and parsed; accepted detail fields are attributed to this page.
HPE Aruba Networking
CVE.org CNA recordCVE.org
Independent CNA record used for near-real-time discovery and missed-CVE reconciliation. Discovered from the machine-readable feed https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/delta.json; this link opens the CVE.org record for CVE-2026-79797 instead of the raw feed document.
CVE Program

Cross-references

Validate CVE metadata against the authoritative registries.

CVE-2026-79797NVD CVE.org MITRE

Official resources

Aruba ClearPass documentation & release notes
Official documentation
Official upgrade documentation for Aruba ClearPass documentation & release notes.
HPE Security Bulletin Library (Aruba PSIRT)
Official documentation
Official HPE/Aruba security bulletins — the canonical affected/fixed version table for this CVE.
HPE Networking Support Portal (software downloads)
Official documentation
Official download location for the fixed ArubaOS / AOS-CX / ClearPass / Instant builds.

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.