SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityAwaiting Analysis

CVE-2026-79817

A sensitive information disclosure vulnerability exists in the client software of HPE Networking ClearPass Policy Manager.

MEDIUM 5.5EPSS 0.10%

Does this matter?

Lower severity and a low EPSS score (0.10%). Track it; it rarely justifies an emergency change on its own.

Description

A sensitive information disclosure vulnerability exists in the client software of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an attacker with local access to the affected system to obtain sensitive information.

CVSS 3.1
5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0.10% probability · 1th percentile
Public exploits
None in Exploit-DB
CISA KEV
Not listed
Weakness
CWE-200
Source
security-alert@hpe.com
EPSS trend
0%3%5%7 October 2026: 0.10%26 October 2026: 0.10%7 October 202626 October 2026

EPSS moved from 0.1% on 7 October 2026 to 0.1% on 26 October 2026.

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.