CVE-2026-79814
MediumCVSS 6.7Summary
An arbitrary file write vulnerability in the ClearPass Policy Manager OnGuard agent could allow malicious users on a local instance to elevate their user privileges if certain preconditions outside of the attacker's control are met. Successful exploitation could allow a local attacker to execute arbitrary code with elevated privileges.
Risk Assessment
A local attacker could write arbitrary files and elevate privileges, potentially leading to malicious code execution on the system. However, this requires specific preconditions to be met.
Recommendation
Update the OnGuard agent to the latest version. Restrict local access to systems with the OnGuard agent.
Other vulnerabilities in ClearPass Policy Manager OnGuard
See all- CVE-2026-79815Medium
A command injection vulnerability in the OnGuard agent of ClearPass Policy Manager could allow an authenticated remote attacker to inject arbitrary commands. Successful exploitation could allow an attacker to execute commands with elevated privileges on the affected Windows endpoint.
- CVE-2026-79812Medium
A denial of service vulnerability exists in the OnGuard agent of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an authenticated local attacker to interrupt the normal operation of the agent service.
Original NVD description (English source)
An arbitrary file write vulnerability in the ClearPass Policy Manager OnGuard agent could allow malicious users on a local instance to elevate their user privileges if certain preconditions outside of the attacker's control are met. Successful exploitation could allow a local attacker to execute arbitrary code with elevated privileges on the affected system.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS