CVE-2026-79815
MediumCVSS 6.5Summary
A command injection vulnerability in the OnGuard agent of ClearPass Policy Manager could allow an authenticated remote attacker to inject arbitrary commands. Successful exploitation could allow an attacker to execute commands with elevated privileges on the affected Windows endpoint.
Risk Assessment
An authenticated attacker could execute arbitrary commands with elevated privileges, potentially leading to full compromise of the Windows system. This could result in a serious security breach for the organization.
Recommendation
Update the OnGuard agent to the latest version. Restrict privileges of accounts used for ClearPass authentication.
Other vulnerabilities in ClearPass Policy Manager OnGuard
See all- CVE-2026-79814Medium
An arbitrary file write vulnerability in the ClearPass Policy Manager OnGuard agent could allow malicious users on a local instance to elevate their user privileges if certain preconditions outside of the attacker's control are met. Successful exploitation could allow a local attacker to execute arbitrary code with elevated privileges.
- CVE-2026-79812Medium
A denial of service vulnerability exists in the OnGuard agent of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an authenticated local attacker to interrupt the normal operation of the agent service.
Original NVD description (English source)
A command injection vulnerability in the OnGuard agent of ClearPass Policy Manager could allow an authenticated remote attacker to inject arbitrary commands. Successful exploitation could allow an attacker to execute commands with elevated privileges on the affected Windows endpoint.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS